Motorola 2.1 - Manual (Page 42)

Chapter 2: Network Setup
Authentication Server Configuration
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
.
.
Juniper Steel-Belted RADIUS
This section describes how to configure Juniper Steel Belted Radius server in support of
EAP-TTLS Secure Mesh. Any Radius server package can be used as long as it supports
EAP-TTLS authentication.
The pre-requisites for the procedure in this section are:
• Windows 2003 server installation complete.
• Installation of our Certificate Authority (CA).
• Creation of a server certificate.
• Steel Belted Radius Enterprise Edition (available from Juniper.net). Download /
purchase SBR installer and proceed to install the program by double clicking the
installer. We download an evaluation copy of this example. Contact Juniper
Networks to purchase a licensed copy.
After the installation SBR is complete we need to add our trusted root and server certificate to our Steel
Belted Radius server.
Exporting Certificates
Procedure 2-9 describes how to export existing certificates and install them for use with
Steel-Belted RADIUS.
Procedure 2-9 Exporting Certificates
With the installation of our certificate authority in the previous section and the creation of a server
certificate we need to add these to Steel Belted Radius.
1 Find the server certificate installed on the authentication server.
• Click Start | Run | and type MMC.exe. Press enter.
• Browse to the certificate store by selecting: Console / Add/Remove Snap-in / Add… /
Certificates / Computer Account .
Result : The select PC dialog appears.
• Select
Local Computer .
• Open the Personal / Certificates folder in its tree view.
• A server certificate was created when we created our Certificate Authority. In our
reference design this certificate will be named radius.
2-28