DHCP and DNS
Active Directory Service
RADIUS Server (Internet Authentication Service)
Certificate based infrastructure (referred to as PKI – Public Key Infrastructure)
I will cover the following steps and show you how to setup an 802.1X based security structure using the Internet Authentication Service (IAS) in Windows Server.
Configuring your access point
Windows 2003/2008 Certification Authority
Windows 2003/2008 Active Directory Service Configuration
Windows 2003/2008 IAS Configuration
Configuring your Access Point
Your Access Points must support 802.1X and WEP authentication. If it doesn’t then check for a firmware upgrade before you proceed. 802.1X and RADIUS provide automatic generation of session keys so they will not have to be entered manually into the Access Point. However, some access points do support manual inputting of keys for simulation (testing) purposes.
Firstly, from your access point configuration web interface, you must set which machines act as RADIUS servers on your network. There may be slight variations but the idea is the same - go to the RADIUS servers list from either the ‘Wireless Security’ or ‘Wireless Settings’ panel and add the IP address, port number and shared secret for your RADIUS server connection.
Secondly, from the ‘Wireless Security’ panel go to the 802.1X Security section and enable it, select your required key size and group key re-key settings.
No rekeying - the clients will not have to re-key the password to re-authenticate to the RADIUS server.
Rekeying every X minutes – this refers to the number of minutes before the client will have to re-enter the password.
Rekeying every X packets – this refers to the number of transmitted packets before the client will have to re-enter the password.
Once you do all this you can move on to the next stage of configuring the Certificate Authority on your Windows 2003 Server.
|
