User`s guide

Zebra Mobile Printers • Wireless Configuration Guide • rev. H 43
Configure the FreeRadius Server
NOTE: The FreeRadius server is available under the
GNU General Public License (GPL), and is freely downloadable
from the Internet. For our example we will be using a Windows
version of the server that can be downloaded from the FreeRa
-
dius.net website (
http://www.freeradius.net). This version of the
FreeRadius server requires the Windows XP operating system.
Download and install the server. In the FreeRadius.net group
click the ‘Edit Clients.conf’ icon. At the bottom of the file add
the following lines to create our test network. This will allow for
a range of access points that must also be configured with this
same shared secret.
client 192.168.1.0/24 {
secret = password
shortname= private-network-3
}
Save the file and open the “Eap.conf” file for editing. If neces-
sary, edit the line that reads ‘default_eap_type’ to select the
TLS protocol:
default_eap_type = tls
Save the file if changes are made.
Next we will verify the user credentials that our printer will use
to login to the network. Open the Users file. Verify that the user
“FreeRADIUS.net-Client” is uncommented as below:
# Test TLS Certificate based user
FreeRADIUS.net-Client User-Password = “demo”
Reply-Message = “Hello, %u”
Save the file if changes are made.
The RADIUS server should now be configured correctly. Start
the server in debug mode by selecting the appropriate icon.
Once the server is initialized it will be ready to process re-
quests and authenticate users.
CONFIGURING THE PRINTER FOR EAP-TLS AUTHENTICATION
The necessary certificate files must be acquired and stored on
the printer to enable configuration for EAP_TLS. Then the ap-
propriate printer parameters to enable EAP-TLS authentication
must be configured. The following description uses the demo
certificates supplied with the Windows version of FreeRadius.
Locate the ‘DemoCerts’ folder of your FreeRadius installation.
At the time of this writing the default path and version is:
C:\Program Files\FreeRADIUS.net-1.0.2-r0.0.8\etc\raddb\certs\
FreeRADIUS.net\DemoCerts
Three certificate files are required in order to successfully au-
thenticate our printer using EAP-TLS (a root certificate from a
certificate authority, a client certificate, and a client private key
certificate). The certificates must be in PEM format. They need
to have specific filenames, and must be stored in the printer’s
flash file system. Copy the following three files from the Fre-
eRadius ‘DemoCerts’ folder and place them in a temporary
folder. Rename the certificate files as shown below. The file
names are case sensitive.
Change file name from to
FreeRADIUS.net-Root.crt CacertSv.nrd
FreeRADIUS.net-Client.crt certCln.nrd
FreeRADIUS.net-Client.pem privkey.nrd
NOTE: Certificate files are normally generated by a trusted
3
rd
-party Certificate Authority (CA). If you are using different
certificate files from the example above the TLS section of the
“Eap.conf “ file will need to be edited to reference the appropri
-
ate files. The root certificate file and client certificate files must
also be renamed as above and saved to the printer’s file system.
To configure a Zebra mobile printer we will use Zebra’s Label
Vista utility and a communications application such as Hyper-
Terminal.
Label Vista can be downloaded from
http://www.zebra.com
.
continued