User guide

Configuring an SM for the Destination Configuring for the Destination
306
pmp-0229 (Mar 2013)
Authentication Key
Only if the AP to which this SM will register requires authentication, specify the key that the SM
should use when authenticating. For alpha characters in this hex key, use only upper case.
Select Key
The Use Default Key selection specifies the predetermined key for authentication in Wireless
Manager
The Use Key above selection specifies the 32-digit hexadecimal key that is permanently stored on
both the SM and the WM
Enforce Authentication
The SM may enforce authentication types of AAA and AP Pre-sharedKey. The SM will not
finish the registration process if the AP is not using the configured authentication method (and the
SM will lockout the AP for 15 minutes).
Phase 1
The protocols supported for the Phase 1 (Outside Identity) phase of authentication are
EAPTTLS (Extensible Authentication Protocol Tunneled Transport Layer Security) or
MSCHAPv2 (Microsoft Challenge-Handshake Authentication Protocol version 2).
Phase 2
Select the desired Phase 2 (Inside Identity) authentication protocol from the Phase 2 options of
PAP (Password Authentication Protocol), CHAP (Challenge Handshake Authentication
Protocol), and MSCHAP (Microsoft’s version of CHAP, version 2 is used). The protocol
must
be consistent with the authentication protocol configured on the RADIUS server.
Identity/Realm
If Realms are being used, select Enable Realm and configure an outer identity in the Identity
field and a Realm in the Realm field. These must match the Phase 1/Outer Identity and Realm
configured in the RADIUS server. The default Identity is “anonymous”. The Identity can be up
to 128 non-special (no diacritical markings) alphanumeric characters. The default Realm is
“canopy.net”. The Realm can also be up to 128 non-special alphanumeric characters.
Configure an outer Identity in the Username field. This must match the Phase 1/Outer Identity
username configured in the RADIUS server. The default Phase 1/Outer
Identity Username is
“anonymous”. The Username can be up to 128 non-special (no
diacritical markings)
alphanumeric
characters.