Dell Powerconnect W-ClearPass Hardware Appliances User Manual page 50

Figure 28:
Generic Policy Manager Service Flow of Control
Table 17:
Policy Manager Service Components
Component
A -
Authentication
Method
B -
Authentication
Source
50
Service:
component Description
ratio
Zero or more EAP or non-EAP method for client authentication.
per service
Policy Manager supports four broad classes of authentication methods:
EAP, tunneled: PEAP, EAP-FAST, or EAP-TTLS.
l
EAP, non-tunneled: EAP-TLS or EAP-MD5.
l
Non-EAP, non-tunneled: CHAP, MS-CHAP, PAP, or [MAC AUTH].
l
[MAC AUTH] must be used exclusively in a MAC-based Authentication
Service. When the [MAC AUTH] method is selected, Policy Manager: (1)
makes internal checks to verify that the request is indeed a MAC
Authentication request (and not a spoofed request) and (2) makes sure that
the MAC address of the device is present in the authentication source.
Some Services (for example, TACACS+ ) contain internal authentication
methods; in such cases, Policy Manager does not make this tab available.
Zero or more An Authentication Source is the identity repository against which Policy
per service Manager verifies identity. It supports these Authentication Source types:
Microsoft Active Directory
l
Dell Networking W-ClearPass Policy Manager 6.0 | User Guide