Cisco AIR-CB21AG-W-K9 Installation And Configuration Manual page 69

Chapter 3 Configuring EAP Types
Table 3-3
Authentication Settings
Select an authentication
method
Configure
Enable fast reconnect
Enable posture validation
Cisco Aironet 802.11a/b/g Wireless LAN Client Adapters (CB21AG and PI21AG) Installation and Configuration Guide for Windows Vista
OL-16534-01
Authentication Settings
Description
Select the inner tunnel EAP method from the drop-down list.
Available methods are EAP-GTC, EAP-MSCHAPv2, EAP-TLS, and
Any Method.
The Any Method option allows the EAP-FAST module to choose any
of the supported methods that the EAP server requests. The method
must also be appropriate to the user credentials that are used.
Default: Any Method
EAP-GTC is the only option available if you selected the Use
Note
one-time password radio button in the User Credentials tab.
EAP-TLS is the only option available if you selected the Use
Note
a certificate on this computer radio button in the User
Credentials tab.
The use of the Any Method value to allow all methods is
Note
unsupported by Cisco or Microsoft and is not recommended.
This configuration is used "as-is"; Cisco makes no guarantee
that there will not be adverse performance to the system if
unsupported methods are used. Unsupported methods should
never be used in a production environment.
Click the Configure button to configure EAP-TLS options. This
option is available only if EAP-TLS is the selected authentication
method. When you click this button, the standard Windows Vista
EAP-TLS Properties Screen appears.
Default: Disabled
Check this box to allow session resumption.
The EAP-FAST module supports fast reconnect (also called session
resumption) by using the User Authorization PAC. When you enable
fast reconnect, you can roam or return from suspend mode without
re-entering your credentials. Fast reconnect can be used across
different network access servers.
Default: On
Note If you switch profiles, logs off, or reboot, fast reconnect is not
attempted. You must be reauthenticated.
Check this box to allow the health information of the host machine to
be queried.
Configuring EAP-FAST
3-15