Filter
Top Products
18
Cisco Connected Grid Modules for CGR 1000 Series—WiMAX Installation and Configuration Guide
OL-26236-03
Configuring the Module
• When a WiMAX module operates in a network with an Airspan base station that has a MAC profile
definition based on non-authentication, some of its base station models might require the privacy
key management (PKM) to be configured on the WiMAX interface. Updating the base station with
the latest firmware generally eliminates the need to change the configuration of the WiMAX
module.
WiMAX Interface Security
The WiMAX module supports the following security methods:
• IEEE 802.16—WiMAX interface Privacy Key Management v2 authentication.
• EAP-TLS—Extensible Authentication Protocol Transport Layer Security (RFC 5216), 802.1x.
• EAP TTLS—Tunneled Transport Layer Security (RFC 3748).
–
MS-CHAPv2—Challenge-Handshake Authentication Protocol Version 2 (RFC 2759).
Note You must complete WiMAX scanlist configuration before attempting the WIMAX interface
configuration. Without associating the WIMAX interface with a configured WIMAX scanlist, you
cannot issue a security command on the WIMAX interface since the interface needs to be associated with
a WiMAX scanlist first.
To configure security on the WiMAX module, complete the following in this order:
Step 1 Configure the WiMAX scanlist. See Step 1–WiMAX Scan-list Configuration, page 20.
Step 2 Associate the WiMAX scanlist to the WiMAX interface. See Step 2–WiMAX Interface Configuration,
page 20.
Step 3 Configure the IP address (static or DHCP) for the WiMAX interface. See Step 2–WiMAX Interface
Configuration, page 20.
Step 4 If you want to configure EAP-TLS or EAL-TTLS as your WiMAX authentication method, then you must
configure the certificate trustpoints. See Step 3–Enable Security Parameters, page 20.
Step 5 Configure EAP TLS or EAP-TTLS. See Step 3–Enable Security Parameters, page 20.
Note The command pkm crypto algorithm aes does not need to be configured since it was included as the
default configuration for the WIMAX interface.
WiMAX X.509 Certificates
Learn more about WiMAX Forum X.509 certificates, see http://www.wimaxforum.org.