Dell PowerConnect W Clearpass 100 Software RADIUS 802.1X/EAP Setup TechNote - Page 4

Configuration, Save Changes, RADIUS Server Control, Export, Server Certificate, Export Server

Page 4 highlights

RADIUS server will need to be restarted to complete these changes, but don't do this just yet as some additional configuration options must be selected. Click the EAP Configuration command link. In the EAP Configuration form, select the EAP types that are to be supported. To enable the common case of PEAPv0/MS-CHAPv2 (broadly supported by all wireless clients that implement 802.1X), complete the form as shown below: Click the Save Changes button. Now restart the RADIUS Server. This will apply the configuration and make it live. You can verify that the EAP configuration is loaded by checking for a certain startup message on the RADIUS Server Control screen: Tue Nov 17 01:04:05 2009 : Info: rlm_eap_tls: Loading the certificate file as a chain Now, the certificate authority used to issue the server's certificate must be exported. To do this, navigate to RADIUS Services > EAP & 802.1X and click the Export Server Certificate command link. In the Export Server Certificate form, select "CA issuer certificate only" and use the default PKCS#7 container format.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9

RADIUS server will need to be restarted to complete these changes, but don’t do this
just yet as some additional configuration options must be selected.
Click the
EAP
Configuration
command link.
In the EAP Configuration form, select the EAP types that are to be supported.
To enable the common case of PEAPv0/MS-CHAPv2 (broadly supported by all
wireless clients that implement 802.1X), complete the form as shown below:
Click the
Save Changes
button.
Now restart the RADIUS Server.
This will apply
the configuration and make it live.
You can verify that the EAP configuration is loaded by checking for a certain startup
message on the
RADIUS Server Control
screen:
Tue Nov 17 01:04:05 2009 : Info: rlm_eap_tls: Loading the
certificate file as a chain
Now, the certificate authority used to issue the server’s certificate must be exported.
To do this, navigate to RADIUS Services > EAP & 802.1X and click the
Export
Server Certificate
command link.
In the
Export Server Certificate
form, select “CA issuer certificate only” and use the
default PKCS#7 container format.