User guide

Setting Up Authentication  45
Chapter 5: Managing Profiles
The authentication protocols specified on the Authentication tab are the outer
authentication methods, which create a secure tunnel between OAC and the
authentication server. Some authentication protocols, such as PEAP and TTLS,
require that you specify an inner authentication method.
Figure 10: Profile Properties for Authentication Settings
Selecting Authentication Protocols
The Authentication protocols list shows the authentication protocols that you
enabled. You can have one or more authentication protocols in the list and add
more if necessary. If you have more than one protocol in the list, you can order
them by preference (top down). The ordering affects the protocol that the server
uses if it has more than one protocol in common with the ones that you select here.
Consult your network administrator before changing these settings.
To add a protocol to the list:
1. Click
Add to open the Add EAP Protocol dialog.
2. Select one or more protocols to add.
3. Click OK.
NOTE: EAP-TTLS, EAP-PEAP, and EAP-FAST all use inner (tunneled) protocols.
EAP-FAST uses EAP-GenericTokenCard as its inner protocol. You can choose one
or more inner protocols for EAP-TTLS or EAP-PEAP. See “TTLS Settings” on
page 48 and “PEAP Settings” on page 51.
NOTE: If FIPS mode is enabled, there is only one outer authentication protocol
supported, EAP-TLS, and no inner authentication protocols. (FE Only)