Table of Contents
Advertisement
Table 4-6 Authentication: 802.1x Setting: Ceritication
L
A B E L
Authentication Type
Session Resumption
Identity
Password
Use Client Certificate
Tunnel Authentication
Protocol
Identity
Password
If you want to use CA server, please click CA Server page. Depending on the EAP in use, only
the server or both the server and client may be authenticated and require a certificate. Server
certificates identify a server, usually an authentication or RADIUS server to clients. Most EAPs
require a certificate issued by a root authority or a trusted commercial CA.
D
E S C R I P T I O N
PEAP: Protected Extensible Authentication Protocol. PEAP transports
authentication data by using tunneling between PEAP clients and an
authentication server. PEAP can authenticate wireless LAN clients using
only server-side certificates, thus simplifying the implementation and
administration of a secure wireless LAN.
TLS／ ／ ／ ／ Smart Card: Transport Layer Security, provides with
certificate-based and mutual authentication of the client and the network.
It relies on client-side and server-side certificates to perform
authentication and can be used to dynamically generate user-based and
session-based WEP keys to secure subsequent communications
between the WLAN client and the access point.
TTLS: Tunneled Transport Layer Security, this security method provides
for certificate-based, mutual authentication of the client and network
through an encrypted channel. Unlike EAP-TLS, EAP-TTLS requires
only server-side certificates.
MD5-Challenge: Message Digest Challenge, is an EAP authentication
type that provides base-level EAP support. It only supports one-way
authentication i.e. there is no mutual authentication of wireless client and
the network. It's only valid for profile's authentication type to be none or
shared.
User can choose Disabled, Reauthenticate, Roaming, SameSsid or
Always.
Enter the Identity for server
Enter the Password for server
Enable the client certificate for server authentication.
Tunnel protocol, List information includes EAP-MSCHAP,
EAP-MSCHAP v2, CAHAP and MD5.
Enter Identity for tunnel
Enter Password for tunnel
25
Advertisement
Table of Contents
