Table of Contents
Advertisement
Chapter 6 WiMAX
This screen contains the following fields:
Table 13 Authentication Settings
LABEL
Authentication
Mode
Data Encryption
AES-CCM
AES-CBC
Key Encryption
AES-key
wrap
AES-ECB
EAP Supplicant
EAP Mode
Anonymous
ID
Server Root
CA Cert File
Server Root
CA Info
Device Cert
File
Device Cert
Info
66
DESCRIPTION
Select the authentication mode from the list.
The WiMAX Device supports the following authentication modes:
•
No authentication
•
User authentication
•
Device authentication
•
User and device authentication
Select this to enable AES-CCM encryption. CCM combines counter-mode
encryption with CBC-MAC authentication.
Select this to enable AES-CBC encryption. CBC creates message
authentication code from a block cipher.
Select this encapsulate cryptographic keys in a symmetric encryption
algorithm.
Select this to divide cryptographic keys into blocks and encrypt them
separately.
Select an Extensible Authentication Protocol (EAP) mode.
The WiMAX Device supports the following:
•
EAP-TLS - In this protocol, digital certifications are needed by both
the server and the wireless clients for mutual authentication. The
server presents a certificate to the client. After validating the
identity of the server, the client sends a different certificate to the
server. The exchange of certificates is done in the open before a
secured tunnel is created. This makes user identity vulnerable to
passive attacks. A digital certificate is an electronic ID card that
authenticates the sender's identity. However, to implement EAP-TLS,
you need a Certificate Authority (CA) to handle certificates, which
imposes a management overhead.
•
EAP-TTLS - This protocol is an extension of the EAP-TLS
authentication that uses certificates for only the server-side
authentications to establish a secure connection. Client
authentication is then done by sending username and password
through the secure connection, thus client identity is protected. For
client authentication, EAP-TTLS supports EAP methods and legacy
authentication methods such as PAP, CHAP, MS-CHAP and MS-CHAP
v2.
Enter the anonymous ID used for EAP supplicant authentication.
Browse for and choose a server root certificate file, if required.
This field displays information about the assigned server root
certificate.
Browse for and choose a device certificate file, if required.
This field displays information about the assigned device certificate.
MAX208M User's Guide
Advertisement
Table of Contents
