Digital certificate on the ACS Wireless network:Checking the configuration of the Wireless Notebook no longer requires the digital certificate of the ACS and NVR122 NVR123as worked in the past.The certificate is generated for the ACS root CA trusted by the COMPANY, so that the public CA certificate supersedes theprevious ACS.Therefore, any host that is in the field of company would have access to the wireless network.With this, the 8021x is working with a certificate that is common to all hosts in the field of business. How do I change it?
Please excuse me if I mis read your question but it seems as if you want to change the root CA that signed the ACS' certificate? The reason for this is because people outside the company will come and connect to the wireless network?
I dont think this is an big issue because root certificates are not meant to be extremely secure, anyone can join the wireless network and then receive a prompt flagging them to not trust the ACS since it isnt signed by a trusted CA. All the user has to do at this point is to accept and they can trust the ACS to send their credentials. As far as gaining access to the network the ACS still has to validate the user.
Let me know if that is the question you are wanting answered.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...