ZyXEL Communications G-560 User Manual page 112

ZyXEL G-560 User's Guide
and EAP-GTC (EAP-Generic Token Card), for client authentication. EAP-GTC is implemented only by
Cisco.
LEAP
LEAP (Lightweight Extensible Authentication Protocol) is a Cisco implementation of IEEE802.1x.
For added security, certificate-based authentications (EAP-TLS, EAP-TTLS and PEAP) use dynamic keys
for data encryption. They are often deployed in corporate environments, but for public deployment, a
simple user name and password pair is more practical. The following table is a comparison of the features
of five authentication types.
Mutual
Authentication
Certificate – Client
Certificate – Server
Dynamic Key
Exchange
Credential Integrity
Deployment
Difficulty
Client Identity
Protection
E-2
Comparison of EAP Authentication Types
EAP-MD5 EAP-TLS
No Yes
No Yes
No Yes
No Yes
None Strong
Easy Hard
No No
EAP-TTLS PEAP
Yes Yes
Optional Optional
Yes Yes
Yes Yes
Strong Strong
Moderate Moderate
Yes Yes
Types of EAP Authentication
LEAP
Yes
No
No
Yes
Moderate
Moderate
No