Rockwell Automation 2727-T7P30D1F MobileView Tablet T750 User Manual User Manual
Page 65
Publication 2727-UM001D-EN-P - March 2004
Communications Configuration 5-11
The 802.1X authentication type that is available on Windows CE
devices is EAP-Cisco Wireless, or LEAP. Support for LEAP is provided
not in the Windows CE operating system but in your client adapter’s
firmware and the Cisco software that supports it. RADIUS servers that
support LEAP include Cisco Secure ACS version 2.6 and greater, Cisco
Access Registrar version1.7 and greater, and Funk Steel-Belted
RADIUS version 3.0 and greater.
LEAP is enabled in ACU, and a LEAP username and password are
entered in the Wireless Login Module (WLM). The username and
password are used by the client adapter to perform mutual
authentication with the RADIUS server through the access point. The
LEAP username and password are stored in the client adapter’s
volatile memory; therefore, they are temporary and need to be
re-entered whenever power is removed from the adapter, typically
due to the client adapter being ejected or the system powering down.
When you enable Network-EAP on your access point and LEAP on
your client adapter, authentication to the network occurs in the
following sequence:
1. The client adapter associates to an access point and begins the
authentication process.
2. Communicating through the access point, the client and RADIUS
server complete a mutual authentication process, with the
password being the shared secret for authentication. The
password is never transmitted during the process.
TIP
Prior versions of the client software for Windows CE
stored the LEAP username and password in the client
adapter’s nonvolatile Flash memory, which was
referred to as device-level LEAP. If a LEAP username
and password are stored in your client adapter’s
Flash memory from a prior release, WLM version
2.10 or greater erases them before a new username
and password are written to the adapter’s volatile
memory, thereby disabling device-level LEAP.
TIP
The client does not gain access to the network until
mutual authentication between the client and the
RADIUS server is successful.