CNET CWP-854 User Manual page 18

802.1x is an authentication mechanism for 『WPA』and 『WPA2』.
802.1x Authentication types：
1. PEAP: Protected Extensible Authentication Protocol. PEAP transports authentication
data by using tunneling between PEAP clients and an authentication server. PEAP can
authenticate wireless LAN clients using only server-side certificates, thus simplifying the
implementation and administration of a secure wireless LAN.
2. TLS／Smart Card: Transport Layer Security, provides for certificate-based and mutual
authentication of the client and the network. It relies on client-side and server-side certificates to
perform authentication and can be used to dynamically generate user-based and session-based
WEP keys to secure subsequent communications between the WLAN client and the access point.
3. TTLS: Tunneled Transport Layer Security, this security method provides for
certificate-based, mutual authentication of the client and network through an encrypted channel.
Unlike EAP-TLS, EAP-TTLS requires only server-side certificates.
4. MD5-Challenge: Message Digest Challenge, is an EAP authentication type that
provides base-level EAP support. It only supports one-way authentication i.e. there is no mutual
authentication of wireless client and the network. It's only valid for profile's authentication type to
be none or shared.
B. If you want to use CA server, please click "CA Server" page. Depending on the EAP in
use, only the server or both the server and client may be authenticated and require a
certificate. Server certificates identify a server, usually an authentication or RADIUS server
to clients. Most EAPs require a certificate issued by a root authority or a trusted
commercial CA. Show as the Fig 5-11
Fig 5-10