Tunneled Authentication - Symbol MC909X Integrator Manual

4 - 10 MC909X Integrator Guide
Authentication Options (Continued)
Table 4-6
Authentication
PEAP
LEAP
TTLS

Tunneled Authentication

Use the
Tunneled Authentication
selections available for PEAP or TTLS authentication.
Tunneled Authentication Dialog Box
Figure 4-9
To select a tunneled authentication type:
Select a tunneled authentication type from the drop-down list. See
1.
Select the
2. User Certificate
requires a user certificate, the check box is already selected.
Tap . The
3. Next
Table 4-7 lists the PEAP tunneled authentication options.
PEAP Tunneled Authentication Options
Table 4-7
PEAP Tunneled
Authentication
MS CHAP v2
TLS
Select this option to enable PEAP authentication. This method uses a digital certificate
to verify and authenticate a user's identity.
Select this option to enable LEAP authentication, which is based on mutual
authentication. The AP and the connecting mobile computer require authentication
before gaining access to the network.
Select this option to enable TTLS authentication.
dialog box to select the tunneled authentication options. There are different
check box if a certificate is required. If you selected the TLS tunnel type that
dialog box appears.
Installed User Certificates
Microsoft Challenge Handshake Authentication Protocol version 2 (MS CHAP v2) is a
password-based, challenge-response, mutual authentication protocol that uses the
industry-standard Message Digest 4 (MD4) and Data Encryption Standard (DES)
algorithms to encrypt responses. The authenticating server challenges the access client
and the access client challenges the authenticating server. If either challenge is not
correctly answered, the connection is rejected. MS CHAP v2 was originally designed by
Microsoft as a PPP authentication protocol to provide better protection for dial-up and
virtual private network (VPN) connections. With Windows XP SP1, Windows XP SP2,
Windows Server 2003, and Windows 2000 SP4, MS CHAP v2 is also an EAP type.
EAP TLS is used during phase 2 of the authentication process. This method uses a user
certificate to authenticate.
Description
Table 4-7 and
Description
Table 4-8.