802.1x

• Version

• Encapsulation

• Role

• EAP Settings

• EAPOL Key Exchange

Version

Select the appropriate IEEE 802.1x version for CAPWAP Tunnel authentication.

Option: 1, 2

Default: 1

Tcl Parameter: Ieee8021xVersion

Encapsulation

Select the data channel encapsulation protocol.

Option: 802.3 (1); 802.11 (0)

Default:802.3 (1)

Tcl Parameter: Ieee8021xEncapsulation

Role

Indicates the role of the network port authentication entity used in IEEE 802.1X (Port Based Network Access Control) EAPOL (EAP authentication over LAN).

Select to indicate whether EAPOL is initiated by the Supplicant or Authenticator, which adds 802.1X support for CAPWAP varient.

• Authenticator (1) (Port Authentication Entity that controls network access)
• Supplicant (0) (Port Authentication Entity seeking access to network resources)

Default: Supplicant

Tcl Parameter: EapolAuthInitiation

EAP Settings

Select to set up 802.1x EAP authentication protocol.

Select the PTK (Pairwise Transient Key – 64 bytes) obtained during handshake.

• CCMP (4)
• TKIP (2)

Tcl Parameter: EapolPtkSuite

Select the GTK (Group Temporal Key), used to decrypt multicast and broadcast traffic.

• CCMP (4)
• TKIP (2)

Tcl Parameter: EapolGtkSuite

Select the Authentication key Management Suite.

• 802.1x (1 )
• PSK (2)

Tcl Parameter: EapolAmkSuite

When you select PSK, EAP Settings are disabled and Pass Phrase is enabled.  Enter the pass phrase used in authentication management.

Range: 8 - 63 characters

Default: password.

Tcl Parameter: EapolPassPhrase.

Indicates the time to wait before attempting key negotiation again.

range is 0 - 65535, default is 5.

Tcl Parameter: EapolExRetryInterval

Indicates the number of times to rtry/attempt key exchange.

Range: 0 - 65535

Default: 3

Tcl Parameter: EapolExRetries