How To Configure Network Authentication (Ieee 802.1X) - SEH myUTN utnserver Pro User Manual

USB Deviceserver User Manual macOS
6.7

How to Configure Network Authentication (IEEE 802.1X)

Authentication is the proof and verification of an identity. With it your network is protected from abuse, because
only authorized devices have access.
The UTN supports authentication according to the IEEE 802.1X standard which is based on EAP (Extensible Au-
thentication Protocol).
If you use authentication according to IEEE 802.1X in your network, the UTN server can participate:
• Configuring EAP-MD5  75
• Configuring EAP-TLS  75
• Configuring EAP-TTLS  76
• Configuring PEAP  76
• Configuring EAP-FAST  77
Configuring EAP-MD5
EAP-MD5 (Message Digest #5) is a user-based authentication via a RADIUS server. First, you have to create a user
(user name and password) on the RADIUS server for the UTN server. Afterwards you set up EAP-MD5 on the UTN
server.
 A user account for the UTN server is set up on the RADIUS server.
1. Start the utnserver Control Center.
2. Select SECURITY – Authentication.
3. From the Authentication method list, select MD5.
4. Enter the user name and the password of the user account that is set up for the UTN server on the RADIUS
server.
5. Click Save & Restart to confirm.
 The settings will be saved.
Configuring EAP-TLS
EAP-TLS (Transport Layer Security) is a mutual, certificate based authentication via a RADIUS server. In this meth-
od, UTN server and RADIUS server exchange certificates through an encrypted TLS connection.
Both RADIUS and UTN server require a valid, digital certificate signed by a CA. This requires a PKI (Public Key Infra-
structure).
WARNING
Follow the instructions below in the given order. If you do not follow the order, the
UTN server might not be reachable in the network.
In this case, reset the parameters of the UTN serve  91.
1. Create a certificate request on the UTN server  70.
2. Create a certificate using the certificate request and the authentication server.
3. Install the requested certificate on the UTN server  70.
4. Install the root CA certificate of the certification authority that has issued the certificate of the authentication
server (RADIUS) is installed in the UTN server  70.
5. Start the utnserver Control Center.
6. Select SECURITY – Authentication.
7. Select TLS from the Authentication method list.
8. From the EAP root certificate list, select the root CA certificate.
9. Click Save & Restart to confirm.
 The settings will be saved.
75
Security