Configuring The Ieee 802.1X Authentication Settings - Canon imageRUNNER ADVANCE C5560i III User Manual

Configuring the IEEE 802.1X Authentication Settings

In a network environment that uses IEEE 802.1X authentication, unauthorized network access is blocked by a LAN
switch (authenticator) that only grants access privileges to client devices (supplicants) that are authorized by the
authentication server (RADIUS server). To connect this machine to an IEEE 802.1X network, settings such as the
authentication method used by the authentication server must be configured on the machine. Administrator or
NetworkAdmin privileges are required in order to configure these settings.
IEEE 802.1X Authentication Method
The machine supports the authentication methods described below. You must register a CA certificate before
using any of these authentication methods.
EAP-TLS (Extensible Authentication Protocol-Transport Level Security)
The machine and the authentication server authenticate each other by mutually sending certificates. A CA
certificate must be registered on the machine to verify the certificate (server certificate) sent from the
authentication server. In addition, a PKCS#12 format key and certificate (client certificate) must be specified
in this setting, so that the authentication server can authenticate the machine. Register these items before
configuring the settings (
be used in combination with the other methods.
EAP-TTLS (EAP-Tunneled TLS)
Only the authentication server sends a certificate. A CA certificate must be registered on the machine to
verify the certificate (server certificate) sent from the authentication server. In addition, a user name and
password need to be specified in these settings, so that the authentication server can authenticate the
machine. Microsoft Challenge Handshake Authentication Protocol Version 2 (MS-CHAPv2) or Password
Authentication Protocol (PAP) can be selected as the internal authentication protocol to support EAP-TTLS.
PEAP (Protected EAP)
Only the authentication server sends a certificate. A CA certificate must be registered on the machine to
verify the certificate (server certificate) sent from the authentication server. In addition, a user name and
password need to be specified in these settings, so that the authentication server can authenticate the
machine. Only MS-CHAPv2 can be selected as the internal authentication protocol to support PEAP.
Setting the IEEE 802.1X Authentication Method
1
Press .
2
Press <Preferences>
Managing the Machine
Registering a CA Certificate(P. 803)
Registering a Key and Certificate(P. 802) ). This authentication method cannot
<Network> <IEEE 802.1X Settings>.
749
4XR3-0E0