Cisco AIR-CB21AG-W-K9 Configuration Guide - Page 91

<xs:documentation>if true, then unauthenticated provisioning is allowed to occur until

Get Cisco AIR-CB21AG-W-K9 PDF manuals and user guides View all Cisco AIR-CB21AG-W-K9 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 91 highlights

Chapter 4 Performing Administrative Tasks The EAP-FAST XML Schema An aid-group is a set of A-IDs that are all trusted equally. Any A-ID in the group can be utilized. Auto-grouping means that when an untrusted A-ID is accepted by the end-user then that A-ID is grouped with the A-ID(s) that were already trusted for that profile, hence automatically creating and growing an A-ID group based on user actions. The advantage of an A-ID group is that if a profile initially starts with the same trusted A-ID(1) and then at some point the end-user authorizes the use of a new A-ID(2) when using this profile it will accept A-ID(2) without bothering the end-user a second time. If true, then when the client is about to do unauthenticated provisioning, the user will be prompted to allow or disallow the unauthenticated provisioning. if true, then unauthenticated provisioning is allowed to occur until it succeeds and a PAC is received, then only authenticated provisioning will be allowed. This indicates that only those PACs referenced in this element (as well as PACs that are auto-provisioned to this profile when this profile is in use) shall be used for validation. Will not utilize PAC for authentication. Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide for Windows Vista OL-16534-01 4-7

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
4-7
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide for Windows Vista
OL-16534-01
Chapter 4
Performing Administrative Tasks
The EAP-FAST XML Schema
<xs:documentation>
An aid-group is a set of A-IDs that are all trusted equally.
Any A-ID in the group can be utilized.
Auto-grouping means that when
an untrusted A-ID is accepted by the end-user then that A-ID is grouped
with the A-ID(s) that were already trusted for that profile, hence automatically creating and growing an
A-ID group based on user actions.
The advantage of an A-ID group is that if a profile initially starts
with the same trusted A-ID(1) and then
at some point the end-user authorizes the use of a new A-ID(2)
when using this profile it will
accept A-ID(2) without bothering the end-user a second
time.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="userValidatesServerIdFromUnauthProv" type="xs:boolean"
default="true">
<xs:annotation>
<xs:documentation>
If true,
then when the client is about to do unauthenticated provisioning, the user will be prompted to
allow or disallow the unauthenticated provisioning.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:element name="unauthProvAllowedTilPacReceived" type="xs:boolean" default="false">
<xs:annotation>
<xs:documentation>if true, then unauthenticated provisioning is allowed to occur until it
succeeds and a PAC is received, then only authenticated provisioning will be
allowed.</xs:documentation>
</xs:annotation>
</xs:element>
<xs:choice>
<xs:element name="validateWithSpecificPacs" type="ValidateWithSpecificPacs">
<xs:annotation>
<xs:documentation>This indicates that only those PACs referenced in this element (as
well as PACs that are auto-provisioned to this profile when this profile is in use) shall be used for
validation.
</xs:documentation>
</xs:annotation>
</xs:element>
</xs:choice>
</xs:sequence>
</xs:complexType>
</xs:element>
<xs:element name="doNotUsePac" type="Empty">
<xs:annotation>
<xs:documentation>Will not utilize PAC for authentication.</xs:documentation>
</xs:annotation>