Oki C9600n OkiLAN 510w Configuration Guide - Page 44

Problem, Solutions

Page 44 highlights

PROBLEM EAP authentication fails. EAP CA Certificate SOLUTION(S) Check the network configuration of the wireless card. • Make sure that IP Address, Subnet Mask and Default Gateway are all set correctly. • Ad-Hoc mode: IP Address cannot be obtained by DHCP. Check the network protocol: • The wireless card supports only TCP/IP protocol. • Ethernet and IPX/SPX are not supported. Check the configuration of the wireless card: • SSID, WEP Key and WPA Pre-Shared Key are all case sensitive. • In the Shared Key mode, check the Key Index and Key SIze. The supported scheme is EAP-TLS. Make sure that the RADIUS Server access point supports EAP-TLS. Supported key sizes and encryption schemes: • Key Scheme = RSA or DSA • Key Size = 512, 1024, 2048 or 4096 bit. • Hash Scheme = md5 or sha1. "Client Auth" must be included in the "Extend Key Usage" attribute of the Client Certificate. The "EAP User" setting in the wireless card must match the Client Certificate setting. The CA Certificate must be provided by the Certificate Authority that directly issued the Server Certificate. 44 Troubleshooting

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44

44
Troubleshooting
EAP
authentication
fails.
Check the network configuration of the wireless card.
• Make sure that IP Address, Subnet Mask and Default
Gateway are all set correctly.
• Ad-Hoc mode: IP Address cannot be obtained by
DHCP.
Check the network protocol:
• The wireless card supports only TCP/IP protocol.
• Ethernet and IPX/SPX are not supported.
Check the configuration of the wireless card:
• SSID, WEP Key and WPA Pre-Shared Key are all
case sensitive.
• In the Shared Key mode, check the Key Index and
Key SIze.
The supported scheme is EAP-TLS. Make sure that the
RADIUS Server access point supports EAP-TLS.
EAP CA
Certificate
Supported key sizes and encryption schemes:
• Key Scheme = RSA or DSA
• Key Size = 512, 1024, 2048 or 4096 bit.
• Hash Scheme = md5 or sha1.
“Client Auth” must be included in the “Extend Key
Usage” attribute of the Client Certificate.
The “EAP User” setting in the wireless card must
match the Client Certificate setting.
The CA Certificate must be provided by the Certificate
Authority that directly issued the Server Certificate.
PROBLEM
SOLUTION(S)