Honeywell Vx9 Manual

							6 - 17
No Security
To connect to a wireless network with no security, make sure the following profile options are used.
1. Enter the SSID of the Access Point assigned to this profile
2. Set Auth Type to Open
3. Set WPA to None
4. Set Encryption to None
5. Set Authentication to None
Once configured, click the Commit button.
Ensure the correct Active Profile is selected on the Configuration tab and restart. The Status tab shows the device is 
connected. 
						

							6 - 18
WEP
To connect using WEP, make sure the following profile options are used.
1. Enter the SSID of the Access Point assigned to this profile
2. Set Auth Type to Open
3. Set WPA to None
4. Set Encryption to WEP 
5. Set Authentication to None
Scroll down to enter the WEP key(s).
Valid keys are 10 hexadecimal or 5 ASCII characters (for 40-bit encryption) or 26 hexadecimal or 13 ASCII characters 
(for 128-bit encryption). Enter the key(s) and click Commit.
Ensure the correct Active Profile is selected on the Configuration tab and restart. The Status tab shows the device is 
connected. 
						

							6 - 19
LEAP
To use LEAP (without WPA, also called WEP-LEAP), make sure the following profile options are used.
1. Enter the SSID of the Access Point assigned to this profile
2. Set Auth Type as follows:
 If the Cisco/CCX certified AP is configured for open authentication, set Auth Type to Open.
 If the AP is configured to use shared key or passphrase, set Auth Type to Shared.
3. Set WPA to None
4. Set Encryption to WEP
5. Set Authentication to LEAP
See Sign-On vs. Stored Credentials (page 6-13) for information on entering credentials.
To use Stored Credentials, scroll down to enter the User Name and Password.  No entries are necessary for Sign-On 
Credentials as the user will be prompted for the Username and Password when connecting to the network. 
Enter the Domain\Username (if the Domain is required), otherwise enter the Username then click Commit.
Ensure the correct Active Profile is selected on the Configuration tab and restart. The Status tab shows the device is 
connected. 
						

							6 - 20
PEAP/MSCHAP
To use PEAP/MSCHAP, make sure the following profile options are used.
1. Enter the SSID of the Access Point assigned to this profile
2. Set Auth Type to Open
3. Set WPA as follows:
WPA/WPA2 to use either TKIP/AES or AES-CCMP
WPA2 to use AEX-CCMP
4. Set Encryption to either TKIP/AES or AES-CCMP depending on WPA type selected
5. Set Authentication to PEAP-MSCHAP
See Sign-On vs. Stored Credentials (page 6-13) for information on entering credentials.
Scroll down to enter credentials:.
 No entries except the CA Certificate Filename are necessary for Sign-On Credentials as the user will be prompted 
for the User Name and Password when connecting to the network.
 For Stored Credentials, User, Password and the CA Certificate Filename must be entered.
Enter these items as directed below.
Enter the Domain\Username (if the Domain is required), otherwise enter the Username. 
						

							6 - 21
Enter the password.
Leave the CA Certificate File Name blank for now.
Click OK then click Commit. Ensure the correct Active profile is selected on the Configuration tab.
See Windows Certificate Store vs. Certs Path (page 6-15) for more information on certificate storage.
Once successfully authenticated, import the CA certificate into the Windows certificate store. Return to the Credentials 
screen and check the Validate server checkbox. 
If using the Windows certificate store:
1. Check the Use MS store checkbox. The default is to use the Full Trusted Store. 
2. To select an individual certificate, click on the Browse button.
3. Uncheck the Use full trusted store checkbox.
4. Select the desired certificate and click Select. You are returned to the Credentials screen.
5. Click OK then click Commit.
If using the Certs Path option:
1. Leave the Use MS store box unchecked.
2. Enter the certificate filename in the CA Cert text box.
3. Click OK then click Commit.
The device should be authenticating the server certificate and using PEAP/MSCHAP for the user authentication. 
Ensure the correct Active Profile is selected on the Configuration tab and restart. The Status tab shows the device is 
connected.
Note: The date must be properly set on the device to authenticate a certificate. 
						

							6 - 22
PEAP/GTC
To use PEAP/GTC, make sure the following profile options are used.
1. Enter the SSID of the Access Point assigned to this profile
2. Set Auth Type to Open
3. Set WPA as follows:
WPA/WPA2 to use either TKIP/AES or AES-CCMP
WPA2 to use AEX-CCMP
4. Set Encryption to either TKIP/AES or AES-CCMP depending on WPA type selected
5. Set Authentication to PEAP/GTC
See Sign-On vs. Stored Credentials (page 6-13) for information on entering credentials.
Scroll down to enter credentials.
 No entries except the CA Certificate Filename are necessary for Sign-On Credentials as the user will be prompted 
for the User Name and Password when connecting to the network. 
Enter these items as directed below.
Enter the Domain\Username (if the Domain is required), otherwise enter the Username.
Enter the password. 
						

							6 - 23
Leave the CA Certificate File Name blank for now.
Click OK then click Commit. Ensure the correct Active Profile is selected on the Configuration tab.
See Windows Certificate Store vs. Certs Path (page 6-15) for more information on certificate storage.
Once successfully authenticated, import the CA certificate into the Windows certificate store. Return to the Credentials 
screen and check the Validate server checkbox. 
Note: Some servers may be configured to allow only a single use of the password for PEAP/GTC. In this case, wait for 
the token to update with a new password before attempting to validate the server. Then enter the new password, 
check the Validate Server checkbox and proceed with the certificate process below.
If using the Windows certificate store:
1. Check the Use MS store checkbox. The default is to use the Full Trusted Store. 
2. To select an individual certificate, click on the Browse button.
3. Uncheck the Use full trusted store checkbox.
4. Select the desired certificate and click Select. You are returned to the Credentials screen.
5. Click OK then click Commit.
If using the Certs Path option:
1. Leave the Use MS store box unchecked.
2. Enter the certificate filename in the CA Cert text box.
3. Click OK then click Commit.
The device should be authenticating the server certificate and using PEAP/GTC for the user authentication. 
Ensure the correct Active Profile is selected on the Configuration tab and restart. The Status tab shows the device is 
connected.
Note: The date must be properly set on the device to authenticate a certificate. 
						

							6 - 24
WPA/LEAP
To use WPA/LEAP, make sure the following profile options are used.
1. Enter the SSID of the Access Point assigned to this profile
2. Set Auth Type as follows:
 If the Cisco/CCX certified AP is configured for open authentication, set Auth Type to Open.
 If the AP is configured to use shared key or passphrase, set Auth Type to Shared.
3. Set WPA as follows:
WPA/WPA2 to use either TKIP/AES or AES-CCMP
WPA2 to use AEX-CCMP
4. Set Encryption to either TKIP/AES or AES-CCMP depending on WPA type selected
5. Set Authentication to LEAP
See Sign-On vs. Stored Credentials (page 6-13) for information on entering credentials.
Scroll down to enter credentials.  No entries are necessary for Sign-On Credentials as the user will be prompted for the 
Username and Password when connecting to the network. 
Enter the Domain\Username (if the Domain is required), otherwise enter the Username. 
						

							6 - 25
Enter the password.
Click the Commit button. 
Ensure the correct Active Profile is selected on the Configuration tab and restart. The Status tab shows the device is 
connected. 
						

							6 - 26
EAP-FAST
To use EAP-FAST, make sure the following profile options are used.
1. Enter the SSID of the Access Point assigned to this profile
2. Set Auth Type to Open
3. Set WPA as follows:
WPA/WPA2 to use either TKIP/AES or AES-CCMP
WPA2 to use AEX-CCMP
4. Set Encryption to either TKIP/AES or AES-CCMP depending on WPA type selected
5. Set Authentication to EAP-FAST
The LCM supports EAP-FAST with automatic or manual PAC provisioning. With automatic PAC provisioning, the user 
credentials, whether entered on the saved credentials screen or the sign on screen, are sent to the RADIUS server. 
The RADIUS server must have auto provisioning enabled to send the PAC provisioning credentials to the Thor VX9.
For automatic PAC provisioning, once a username/password is authenticated, the PAC information is stored on the 
Thor VX9. The same username/password must be used to authenticate each time. See the note below for more 
details.
For manual PAC provisioning, the PAC filename and Password must be entered.
See Sign-On vs. Stored Credentials (page 6-13) for information on entering credentials.
Scroll down to enter credentials.  The entries necessary are determined by the type of credentials (stored or sign on) 
and the type of PAC provisioning (automatic or manual).
No entries are necessary for Sign-On Credentials with automatic PAC provisioning as the user will be prompted for the 
Username and Password when connecting to the network.