Zebra Setup Utility, Zebra Mobile Printer, Cisco ACS, Cisco Access Point, EAP-FAST, WPA-EAP-FAST

Transcription

1 Zebra Setup Utility, Zebra Mobile Printer, Cisco ACS, Cisco Access Point, EAP-FAST, WPA-EAP-FAST This section of the document illustrates the Cisco ACS radius server and how EAP- FAST WPA-EAP- FAST was configured on this server. This document is meant as an illustration only. Questions on the setup of ACS should be directed to Cisco. It should be Cisco that is used to determine if the illustration below is appropriate for your environment. Note that the configuration on the Cisco ACS radius server is identical for both EAP-FAST and WPA- EAP-FAST The first series of screenshots shows how a Radius client is added to ACS. In the screenshot below a Cisco Access Point with the IP address of is added. The ACS server needs to have a client in the clients table to ensure that authentication requests are only being received from valid clients. A secret key is entered on the ACS server. This secret key needs to match the secret key on the radius client ( in this example the Cisco Access point). A username is entered for the printer and a password for the printer is also added. In this example the username is Printer1.

2 The screenshot below shows where the password is added. The EAP-FAST configuration can be found in the System configuration detail.

3 The next step is to obtain the.pac file from the ACS radius server. With EAP-FAST and WPA-EAP- FAST the pac file needs to be stored on the mobile printer. The filename on the printer for this pac file has to be called ZEBRA.PAC

4 Creating the.pac file can be done via a dos command prompt. Example below: In my example I am specififying the pac file is generated with a private key ( keypassword ) for the username Printer1. The first step here is to create a directory for the pac file to be placed once it is created. I created a directory on my C: drive called ClientPACs From a DOS prompt within the directory of the Csutil.exe I typed in CSUtil.exe -t -u Printer1 -passwd keypassword -filepath C:\ClientPACs

5 I then retrieved the.pac file from the ClientPACs directory. This is the file that needs to be placed onto the mobile printer. The screenshots below shows how a successful authentication appears on the ACS server.

6 This section of the document illustrates a Cisco Access Point. This document is meant as an illustration only. Questions on the setup of your Cisco Access Pont should be directed to Cisco. It should be Cisco that is used to determine if the illustration below is appropriate for your environment This illustration shows how the Cisco Access pont was configured for WPA-EAP-FAST and then EAP- FAST. With EAP-FAST and WPA-EAP-FAST the authentication request is forwarded to a Radius server. The following screenshots illustrate how a radius server can be added. The example below shows an entry of a radius server with an IP address of and utilizing the port number of and 1812 are common port numbers used with the RADIUS protocol. A secret key is also entered. This secret key needs to match the secret key that is entered on the RADIUS server. The screenshot below illustrates how one creates and specifies a radius server, the shared secret key and the authentication port used by the radius server.

7 The next step illustrated here is how an ESSID is created in this example the ESSID that was created is Zebra_FAST Please note that ESSID s are case sensitive.

8 The first illustration is EAP-FAST (Note the absence of WPA )

9

10 The Cisco Access point shows the following for a successful EAP-FAST connection.

11 In the next illustration, the Cisco Access point is being configured for WPA-EAP-FAST In this illustration, I have set the wpa handshake timeout to a value of 1000

12

13 The screenshot below shows how the Cisco Access point shows a successful WPA-EAP-FAST connection.

14 This section of the document illustrates how to configure the printer for WPA-EAP-FAST and will continue by illustrating how to configure the printer for EAP-FAST. The illustration will use the Zebra Setup utility as the method for configuring the printer.

15

16 In this example I am configuring the printer with a static IP address. Click Next

17 The above screenshot shows EAP-FAST The screenshot below shows WPA-EAP-FAST If you have configured a privatekey password enter it as shown below then click on the Certificates button.

18 This is where you can browse for the.pac file that was created with your ACS server.

19 Click Next Click Next

20 Click Next Choose Printer then click the Finish button. The printer will receive the data that was created with the Zebra Setup Utility and will reboot