Specifications
OmniAccess Reference: AOS-W System Reference
234 Part 031652-00 May 2005
The second and more secure method specifies the domain name of the
authentication server. Only servers with this domain name that send a valid
trusted certificate will be authorized. To configure a trusted server, click
Add
on the Trusted Servers screen.
Profile Configuration
To use 802.1x authentication, a profile must be created to configure the
appropriate EAP type, as well as other authentication details. Profiles are
configured in the
Profiles screen.
The first step of profile configuration is to establish the user information and
type of authentication credentials. In this example, a username and password
is required to access the network. The password can be saved on the device, if
desired.
Next, the authentication EAP type must be selected. In this case, PEAP is used
in this network. The “Validate server certificate” option should always be
enabled for security reasons.
Finally, settings for PEAP must be configured. MS-CHAP v2 is used to hash
the user’s password. This is the default PEAP mode of operation for most
RADIUS servers, including Microsoft IAS.
Networks Configuration
Once a profile has been configured, the SSID with which the device should
connect must be configured. This is done in the “Networks” screen.
In the example below, the SSID “Wireless LAN-01” will be used. Open
authentication is used with WEP encryption. The previously-created “Wireless
LAN” authentication profile will be used to authenticate to the network, and
WEP keys will be generated automatically during 802.1x authentication.
Connection Configuration
Finally, the default network should be specified. Although multiple networks
may be configured under the “Networks” screen, only one of them will be the
default network.
Push to Device
After all configuration has been completed in the Funk Odyssey Configuration
Manager, the configuration must be pushed out to the mobile device. After
establishing an ActiveSync connection, select
Commands > Push To Device from
the Odyssey Configuration Manager.