User guide

Using the EAP Authenticator
Chapter 13: Setting Your Security Policy 435
See Adding and Editing Users on page 680.
e. Provide each of the users with the authentication credentials you
configured for them.
2. Configure each wireless client as follows:
a. Configure the client for server authentication.
See Configuring Clients for Server Authentication on Wireless Connections on
page 436.
b. Install the Safe@Office appliance's CA certificate as a trusted root CA.
See Installing the Safe@Office Appliance's CA Certificate on Clients on page
442.
3. Connect the wireless client to the wireless network.
See Connecting Clients to the Safe@Office Appliance on page 447.
Using the EAP Authenticator for Authentication of Wired Clients
To use the EAP authenticator for authentication of wired clients
1. Configure the Safe@Office appliance as follows:
a. Configure the desired port for port-based security using the Safe@Office
EAP authenticator.
See Configuring Port-Based Security on page 415.
Note: The Port Security field must set to 802.1x, and the Authentication Server field must
be set to Internal User Database.
b. Ensure that the Safe@Office appliance has a certificate installed in the
Safe@Office Portal's VPN > Certificate page.
The certificate can be any of the following:
 A self-signed certificate generated by the Safe@Office appliance, version
8.0 or later.
If a self-signed certificate is installed on the appliance, but was generated by
an earlier firmware version, you must generate a new certificate. For