User guide

Odyssey Access Client User Guide
50  TTLS Settings
EAP as an Inner Authentication Protocol
If you select EAP as your inner authentication protocol, you must configure the
Inner EAP protocols list on the TTLS Settings tab of the Profile Properties dialog
with one or more protocols.
To add an inner EAP protocol:
1. From the TTLS tab in the Profile Properties dialog, select EAP from the
pull-down list of inner authentication protocols.
2. Click Add to display the list from which you can choose inner EAP protocols.
3. Select an inner EAP protocol from the list and click OK.
4. To add other inner EAP protocol to the list, repeat this procedure.
See Table 4 on page 49 for a list of outer EAP protocols and the corresponding inner
protocols.
To remove a protocol:
1. Select the protocol to remove.
2. Click Remove.
To reorder protocols:
1. Select a protocol to move.
2. Use the up and down arrow buttons on the TTLS Settings tab of the Profile
Properties dialog to reposition the protocol on the list.
Using Certificates with EAP-TTLS Authentication
To select EAP-TTLS personal certificate options:
1. Select Permit login using my certificate on the Certificate subtab of the User
Info
tab.
2. In the TTLS tab of the Profile Properties dialog, select one of the following
personal certificate options:
 Use only my certificate for authentication—Configure EAP-TTLS
certificate-based authentication without a password. If you select this
option and you do not select any password-based authentication methods
for this profile, you can clear the Permit login using password setting on
the Setting Passwords subtab of the Specifying User Info
tab. See “Setting
Passwords” on page 40 for a list of password-based authentication
methods.
 Use my certificate and perform inner authentication—Configure
EAP-TTLS certificate-based authentication and tunnel password credentials
for use with an inner authentication protocol.