D-Link DWL-2600AP User Manual - Mutual Authentication
Configuring Advanced Settings
D-Link
Unified Wired and Wireless Access System
Oct. 2015
Page 630
D-Link UWS User Manual
Mutual Authentication
Mutual Authentication provides security when adding switches and APs to the wireless network. If Mutual
Authentication mode is enabled, the APs and switches perform X.509 Mutual Certificate exchanges. Each
device compares the certificate received from the remote end-point with the local copy of the remote device's
certificate. If the certificates don't match then the Transport Layer Security (TLS) connection is dropped.
Figure 394: Mutual Authentication
The following table shows the fields on the
Mutual Authentication
page.
Command Buttons
The page includes the following buttons:
•
Submit
—Updates the switch with the values you enter. To retain the new values across a power cycle,
you must perform a save (Tool > Save Changes).
•
Refresh
—Updates the page with the latest information.
Table 361: Mutual Authentication
Field
Description
Switch Provisioning Mode
When this field is enabled, switches can send and receive provisioning messages.
As a security feature, you can disable switch provisioning. When switch
provisioning mode is disabled the switch does not accept provisioning messages.
Network Mutual
Authentication Mode
Select
Enable
to require mutual authentication on the wireless network. When
Disable
is selected, mutual authentication is not required.
Changing this parameter on one switch automatically updates the configuration
on all other switches in the cluster and all managed APs in the cluster.
When this field is enabled, switch provisioning must be enabled in order for new
switches to be added to the cluster. If switch provisioning is disabled, the cluster
will not accept certificates from a new switch.
Unmanaged AP
Reprovisioning Mode
When this field is enabled, the AP can be re-provisioned when it is not managed.
Changing this parameter on one switch automatically updates the configuration
on all other switches. This parameter is only applicable if mutual authentication
is enabled.