Proxy Mode

To Configure 802.1x EAP-TLS Authentication in Proxy Mode:

1. From the top menu, click AP.
2. In the AP list, click the wireless AP (not the checkbox) for which you want to configure 802.1x EAP-TLS authentication.
3. Click the 802.1x tab.
4. Click Generate Certificate Signing Request. The Generate Certificate Signing Request window is displayed.
   

   
5. Type the criteria to be used to create the certificate request. All fields are required:
   • Country name — The two-letter ISO abbreviation of the name of the country
   • State or Province name — The name of the State/Province
   • Locality name (city) — The name of the city
   • Organization name — The name of the organization
   • Organizational Unit name — The name of the unit within the organization
   • Common name — Click the value you want to assign as the common name of the wireless AP. (See Credential Parameters for credential parameters and values).
   • Email address — The email address of the organization
6. Click Generate Certificate Signing Request. A certificate request file is generated (.csr file extension). The name of the file is the AP serial number. The File Download dialog is displayed.
7. Click Save. The Save as window is displayed.
8. Navigate to the location on your computer that you want to save the generated certificate request file, and then click Save.
9. In the third-party Certificate Authentication application, use the content of the generated certificate request file to generate the certificate file (.cer file extension).
10. On the 802.1x tab, click Browse. The Choose file dialog is displayed.
11. Navigate to the location of the certificate file, and click Open. The name of the certificate file is displayed in the X509 DER / PKCS#12 file box.
12. To save your changes, click Save.

    The 802.1x EAP-TLS (certificate and private key) authentication in proxy mode is assigned to the AP. The wireless AP can now be deployed to a 802.1x enabled switch port.