Canon iR3245 Network Manual page 49

EAP-TTLS (EAP-Tunneled TLS)
For the EAP-TTLS method, only the RADIUS server issues a digital certificate. The server certificate
sent from the RADIUS server is verified using the CA certificate on the client. The CA certificate used
to verify the server certificate must be registered. For information on installing the CA certificate file
using the Remote UI, see the Remote UI Guide For information on registering the CA certificate file
installed, see "Registering a CA Certificate File Installed from a Computer(p.3-47)."
Furthermore, the name of the user to authenticate with IEEE802.1 authentication and the password
need to be set to use EAP-TTLS with the machine.
The user can select two types of internal authentication protocol supported by EAP-TTLS:
MS-CHAPv2 (Microsoft Challenge Handshake Authentication Protocol Version 2), or PAP (Password
Authentication Protocol). If both MS-CHAPv2 and PAP are selected, MS-CHAPv2 is prioritized.
PEAP (Protected EAP)
For the PEAP method, only the RADIUS server issues a digital certificate. The server certificate sent
from the RADIUS server is verified using the CA certificate on the client. The CA certificate used to
verify the server certificate must be registered. For information on installing the CA certificate file
using the Remote UI, see the Remote UI Guide For instructions on registering the installed CA
certificate file, see "Registering a CA Certificate File Installed from a Computer(p.3-47)."
Furthermore, the name of the user to be authenticated with IEEE802.1X authentication and the
password need to be set to use PEAP with the machine.
The only internal authentication protocol supported by PEAP is MS-CHAPv2.
IEEE802.1X Authentication Settings
2
2-21