Peap (Eap-Mschap V2) Security - LevelOne WNC-0302USB User Manual

Check Use Windows User Name
o
user name.
OR: Enter a EAP user name in the User Name field to use a separate user
o
name and password and start the EAP authentication process.
Click Advanced
4.
Leave the server name field blank for the client to accept a certificate from
o
any server with a certificate signed by the authority listed in the Network
Certificate Authority drop-down list. (recommended)
Enter the domain name of the server from which the client will accept a
o
certificate.
Change the login name if needed.
o
Click OK.
5.
Enable the profile.
6.
Using PEAP-GTC Security
Important Note! To use PEAP (EAP-GTC) security, the server must have WPA-PEAP
certificates, and the Certificate Authority (CA) server properties must already be set
up. Please check with your IT administrator.
To use PEAP security, access the Security tab in the Profile Management
window.
1. In the LCU, edit the security settings by clicking New or Modify on the
Profile Management tab.
2. Choose a profile to edit, or name the new profile in the Profile
Management window. Enter the SSID of the access point the client computer
connects to.
3. On the Security tab, choose the WPA radio button.
OR: On the Security tab, choose the 802.1x radio button.
4. Choose PEAP (EAP-GTC) or PEAP (EAP-MSCHAP V2) from the
drop-down menu.
PEAP (EAP-GTC) authentication is designed to support one-time Password (OTP), Windows
2000 domain, and L DAP user databases over a wireless LAN. It is based on EAP-TLS
authentication but uses a password instead of a client certificate for authentication. PEAP
(EAPGTC) uses a dynamic session-based WEP key derived from the USB device and RADIUS
server to encrypt data.
Networks that use an OTP user database require entering a hardware or software token
password to start the PEAP (EAP-GTC) authentication process and to gain access to the
network. Networks that use a Windows 2000 domain user database or an L DAP user database
(such as NDS) require entering a username, password, and domain name in order to start the
PEAP (EAP-GTC) authentication process.
The PEAP (EAP-MSCHAP V2) authentication type is based on EAPTLS authentication, but uses
password instead of a client certificate for authentication. PEAP (EAP-MSCHAP V2) uses a
dynamic session-based WEP key, which is derived from the USB device and RADIUS server, to
encrypt data.
and:
19
to use the Windows user name as the EAP