ZyXEL Communications ZyXEL ZyAIR B-1000 User Manual page 198

ZyAIR Access Point Series User's Guide
hiding client identity. However, PEAP only supports EAP methods, such as EAP-MD5 and EAP-
MSCHAPv2, for client authentication.
For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys
for data encryption. They are often deployed in corporate environments, but for public deployment, simple
user name and password pair is more practical. The following table is a comparison of the features of four
authentication types.
Mutual
Authentication
Certificate – Client
Certificate – Server
Dynamic Key
Exchange
Credential Security
Deployment
Difficulty
Wireless Security
Client Identity
Protection
F-2
Comparison of EAP Authentication Types
EAP-MD5
No
No
No
No
None
Easy
Poor
No
EAP-TLS EAP-TTLS
Yes
Yes Optional
Yes
Yes
Strong
Hard Moderate
Best
No
PEAP
Yes Yes
Optional
Yes Yes
Yes Yes
Strong Strong
Moderate
Good Good
Yes Yes
Types of EAP Authentication