Cisco AIR-CB21AG-W-K9 Configuration Guide - Page 75

Finding the Version of the LEAP Module, Overview of PEAP-GTC

Get Cisco AIR-CB21AG-W-K9 PDF manuals and user guides View all Cisco AIR-CB21AG-W-K9 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 75 highlights

Chapter 3 Configuring EAP Types Overview of PEAP-GTC Table 3-4 LEAP Network Credentials Settings (continued) LEAP Network Credentials Settings Prompt automatically for username and password Use saved username and password Description Click this radio button to require the user to enter a separate LEAP username and password, which are registered with the backend server, in addition to a Windows username and password with every authentication attempt. Default: Off Click this radio button so that the user is not required to enter a LEAP username and password with each Windows login. Authentication occurs automatically as needed using a saved username and password, which are registered with the backend server. Default: Off When selecting this option, the user must do the following: • Enter a username in the Username field. • Enter a password in the Password field. • Confirm password-Enter the password again to verify that it was entered correctly. Note The maximum number of characters allowed for the username and password is 256. The following three scenarios for credentials entry are supported by the LEAP module: • Boot time-During this state, no users are logged on. The LEAP module uses machine credentials for network authentication. The LEAP module does not prompt the user for information but instead obtains the machine credentials by using Microsoft's Local Security Authority (LSA) API. • Pre-Logon-During this state, Microsoft's Layer 2 credential provider (L2NA) queries the LEAP module through Microsoft's EAPHost APIs for types of credentials that are needed. The LEAP module indicates the appropriate type: Windows, network, or none. The user enters the appropriate credentials in a Microsoft L2NA prompt. • Post-Logon-Although the user has already logged on, the LEAP module might need to prompt the user for network credentials because a card was inserted or because network authentication failed. The LEAP module invokes the EapInvokeInteractiveUI API, which is a Microsoft EAPHost API. A LEAP credentials prompt appears, and the user must enter a username and password. Finding the Version of the LEAP Module The LEAP module version number, copyright information, and open-source software information are in About tab (see Figure 3-9). Overview of PEAP-GTC Extensible Authentication Protocol (EAP) provides support for multiple authentication methods. While EAP was originally created for use with PPP, it has since been adopted for use with IEEE 802.1X, which is Network Port Authentication. Since its deployment, a number of weaknesses in EAP have become Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide for Windows Vista OL-16534-01 3-21

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
3-21
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide for Windows Vista
OL-16534-01
Chapter 3
Configuring EAP Types
Overview of PEAP-GTC
The following three scenarios for credentials entry are supported by the LEAP module:
•
Boot time—During this state, no users are logged on. The LEAP module uses machine credentials
for network authentication. The LEAP module does not prompt the user for information but instead
obtains the machine credentials by using Microsoft’s Local Security Authority (LSA) API.
•
Pre-Logon—During this state, Microsoft’s Layer 2 credential provider (L2NA) queries the LEAP
module through Microsoft’s EAPHost APIs for types of credentials that are needed. The LEAP
module indicates the appropriate type: Windows, network, or none. The user enters the appropriate
credentials in a Microsoft L2NA prompt.
•
Post-Logon—Although the user has already logged on, the LEAP module might need to prompt the
user for network credentials because a card was inserted or because network authentication failed.
The LEAP module invokes the EapInvokeInteractiveUI API, which is a Microsoft EAPHost API. A
LEAP credentials prompt appears, and the user must enter a username and password.
Finding the Version of the LEAP Module
The LEAP module version number, copyright information, and open-source software information are in
About tab (see
Figure 3-9
).
Overview of PEAP-GTC
Extensible Authentication Protocol (EAP) provides support for multiple authentication methods. While
EAP was originally created for use with PPP, it has since been adopted for use with IEEE 802.1X, which
is Network Port Authentication. Since its deployment, a number of weaknesses in EAP have become
Prompt automatically for
username and password
Click this radio button to require the user to enter a separate LEAP
username and password, which are registered with the backend
server, in addition to a Windows username and password with every
authentication attempt.
Default:
Off
Use saved username and
password
Click this radio button so that the user is not required to enter a LEAP
username and password with each Windows login. Authentication
occurs automatically as needed using a saved username and
password, which are registered with the backend server.
Default:
Off
When selecting this option, the user must do the following:
•
Enter a username in the
Username
field.
•
Enter a password in the
Password
field.
•
Confirm password—Enter the password again to verify that it
was entered correctly.
Note
The maximum number of characters allowed for the username
and password is 256.
Table 3-4
LEAP Network Credentials Settings (continued)
LEAP Network Credentials
Settings
Description