Extreme Networks WM20 Controller Specifikace Strana 28
- Strana / 170
- Tabulka s obsahem
- KNIHY
Hodnocené. / 5. Na základě hodnocení zákazníků
Creating the Windows Security Infrastructure
Summit WM20 Technical Reference Guide, Software Version 4.228
revocation checking. If a new CRL is manually published to the Active Directory, the local CRL on the
IAS server is not updated. The local CRL is updated when it expires. This can create a situation wherein
a certificate is revoked, the CRL is manually published, but the IAS server still allows the connection
because the local CRL has not yet been updated.
Step 1b: Installing Computer Certificates
If you are using a Windows Server 2003 or Windows 2000 Certificate Services enterprise CA as an
issuing CA, you can install a computer certificate on the IAS server by configuring Group Policy for the
autoenrollment of computer certificates for computers in an Active Directory system container.
To configure computer certificate enrollment for an enterprise CA:
1 Open the Active Directory Users and Computers snap-in.
2 In the console tree, double-click Active Directory Users and Computers, right-click the domain
name to which your CA belongs, and then click Properties
3 On the Group Policy tab, click the appropriate Group Policy object (the default object is Default
Domain Policy), and then click Edit.
4 In the console tree, open Computer Configuration, then Windows Settings, then Security Settings,
then Public Key Policies, then Automatic Certificate Request Settings.
5 Right-click Automatic Certificate Request Settings, point to New, and then click Automatic
Certificate Request.
6 The Automatic Certificate Request wizard appears. Click Next.
7 In Certificate templates, click Computer, and then click Next. Your enterprise CA appears on the list
8 Click the enterprise CA, click Next, and then click Finish.
9 To immediately obtain a computer certificate for the CA that is running Windows 2000 Server, type
the following at a command prompt: secedit /refreshpolicy machine_policy
10 To immediately obtain a computer certificate for the CA that is running Windows Server 2003, type
the following at a command prompt: gpupdate /target:computer
After the domain is configured for autoenrollment, each computer that is a member of the domain
requests a computer certificate when computer Group Policy is refreshed. By default, the Winlogon
service polls for changes in Group Policy every 90 minutes. To force a refresh of computer Group Policy,
restart the computer or type secedit /refreshpolicy machine_policy (for a computer running Windows
2000) or gpupdate /target:computer (for a computer running Windows XP or Windows Server 2003) at a
command prompt. Perform this procedure for each domain system container as appropriate.
Best Practices
If you use a Windows Server 2003 or Windows 2000 enterprise CA as an issuing CA, configure
autoenrollment of computer certificates to install computer certificates on all computers. Ensure that all
appropriate domain system containers are configured for autoenrollment of computer certificates either
through the inheriting of group policy settings of a parent system container or explicit configuration
Step 1c: Installing User Certificates
If you are using a Windows Server 2003, Enterprise Edition, or Windows Server 2003, Datacenter
Edition, enterprise CA as an issuing CA, you can install user certificates through autoenrollment.
- Software Version 4.2 1
- Table of Contents 3
- About this Guide 7
- Formatting conventions 8
- Documentation feedback 8
- Protocols and standards 8
- Protocol (DHCP) 9
- Table 1: Use of DHCP 13
- Table 2: DHCP setup 14
- ● General options: lines 1-3 16
- General options 17
- Static Wireless AP Addressing 20
- Best Practices 26
- Step 3a: Configuring IAS 30
- Add RADIUS clients 33
- Best Practice 34
- Add a remote access policy 34
- Dictionary file 37
- Client Computers for EAP-TLS 40
- Computers for EAP-TLS 40
- Request a certificate 41
- Export a certificate 42
- Import a certificate 42
- PEAP-MS-CHAP v2 44
- ● Using a third-party CA 45
- ● Cross-forest authentication 45
- Using a Third-Party CA 47
- Security 51
- Wireless APs 52
- Wireless Network Adapters 52
- Active Directory 53
- Scalability 54
- Group Policy extension 55
- 5 Diagnostics 57
- Using the console port 58
- Summit WM20 Rescue Procedure 58
- Local Rescue 59
- Remote Rescue 59
- Summit WM20 Controller’s LEDs 59
- Table 8: Protocols and Ports 61
- Diagnostics 62
- 6 Hardware Maintenance 63
- Controller 64
- Interface (GUI) 67
- 7 MAC Based Authentication 69
- Radius redundancy 70
- Rejection and failure 70
- Additional RADIUS attributes 70
- Assumptions/recommendations 71
- Use Cases 71
- Vendor Interoperability 71
- MAC Based Authentication 72
- 8 FreeRADIUS and Security 73
- Debugging FreeRADIUS 76
- 9 RADIUS Attributes 77
- RADIUS Accounting 78
- Termination Codes 79
- RADIUS response messages 80
- RADIUS Attributes 82
- 10 SNMP MIBs 83
- IEEE802dot11-MIB 84
- Proprietary MIBs 85
- SNMP MIBs 86
- Introduction 87
- DRM Benefits 88
- DRM Power Control 89
- DRM Standard Power Control 89
- Maximizing RF Footprint 89
- DRM Details 89
- Minimizing interference 90
- Supporting New Clients 92
- RF Domain 92
- DRM Shaped Power Control 92
- DRM Power Control Summary 93
- Scanning Phase 94
- Selection Phase 95
- Negotiation Phase 95
- Operation Phase 96
- Channel Selection Time 96
- Management 96
- Reporting 98
- Glossary 99
- A Logs and Events 101
- Logs and Events 102
- EVENT_SERVER (1) 103
- CONFIG_MANAGER (2) 109
- STATS_SERVER (3) 111
- SECURITY_MANAGER (4) 113
- RU_MANAGER (6) 124
- RADIUS_CLIENT (7) 127
- HOST_SERVICE_MANAGER (8) 130
- VNMGR (9) 130
- STACK_ADAPTER (10) 137
- CLI (11) 137
- LANGLEY (13) 138
- NSM_SERVER (15) 139
- OSPF_SERVER (17) 140
- CDR_COLLECTOR (23) 141
- RF_DATA_COLLECTOR (36) 146
- REMOTE_INS (58) 147
- LLC_HANDLER (62) 152
- RADIUS_ACCOUNTING (64) 153
- RU_SESMGR_ID (65) 154
- MU_SESMGR_ID (66) 156
- FILTER_MGR_ID (67) 157
- REDIRECTOR4 (68) 159
- BEAST (75) 161
- BEACONPOINT (99) 162
- FILTER_MANAGER_ID (103) 162
- REDIR_ID (106) 162
- CPDP_AGENT_ID (110) 163
- PORT_INFO_J_MANAGER (118) 163
- ECHELON (126) 163
- RFC list 165
- 802.11 standards list 166
- Reference lists of standards 168
Související produkty a manuály pro Software Extreme Networks WM20 Controller
Software Extreme Networks Ridgeline Guide Specifikace
(376 stránky)
(376 stránky)
Software Extreme Networks Summit WM Series Specifikace
(140 stránky)
(140 stránky)
BLANCO 157-124 manuels
Manuels d'utilisation et guides de l'utilisateur pour Non BLANCO 157-124.
Nous fournissons des manuels en pdf 1 BLANCO 157-124 à télécharger gratuitement par type de document : Manuel de l'utilisateur
Komentáře k této Příručce