beautypg.com

IBM Tivoli and Cisco User Manual

Page 260

background image

242

Building a Network Access Control Solution with IBM Tivoli and Cisco Systems

4. Click EAP-FAST Configuration from the Global Authentication Setup

(Figure 7-24 on page 241).

Figure 7-25 EAP-FAST Configuration screen

5. The EAP-FAST configuration, as shown in Figure 7-25, requires you to enter

a lot of fields. Table 7-1 lists all fields and their respective values.

Table 7-1 EAP-FAST Configuration values

EAP-FAST configuration

Condition

Allow EAP-FAST

Checked

Active Master Key TTL

One month

Retired Master Key TTL

Three months

Tunnel PAC TTL

One week

Client Initial Message

Authority ID Info

cisco

Allow anonymous in-band PAC provisioning

Checked

Accept client on authenticated provisioning

Checked