CNET CWP-906 User Manual page 74

EAP Fast
1. Allow unauthenticated provision mode: During the PAC can be provisioned (distributed one time) to the client auto-
matically.
It only supported "Allow unauthenticated provision mode" and use "EAP-MSCHAP v2" authentication to authenticate
now.
It causes to continue with the establishment of the inner tunnel even though it is made with an unknown server.
2. Use protected authentication credential: Using PAC, the certificate can be provided to the client manually via disk or a
secured network distribution method
Server Certification
1. Certificate issuer: Select the server that issues the certificate.
2. Allow intermediate certificates: It must be in the server certificate chain between the server certificate and the server
specified in the "certificate issuer must be" field.
3. Server name: Enter an authentication sever root.
CNet Technology Inc.
www.CNet.com.tw