User guide

PEAP Settings  51
Chapter 5: Managing Profiles
 None—Configure EAP-TTLS authentication without a client-side certificate.
This option specifies the most typical use of EAP-TTLS authentication.
Select this option unless you intend to use a client certificate as part of
EAP-TTLS authentication.
3. Click OK.
PEAP Settings
If you select EAP-PEAP as an authentication method in the Authentication tab,
Table 4 on page 49 shows the inner EAP authentication methods that are valid with
PEAP.
You can add, remove, or reorder any EAP-PEAP inner protocols from the PEAP
Settings
tab of the Profile Properties dialog.
To add an inner PEAP protocol:
1. From the PEAP tab in the Profile Properties dialog, select EAP from the
pull-down list of inner authentication protocols.
2. Click Add to display the list from which you can choose inner EAP protocols.
Any protocols that you selected previously are not listed.
3. Select an inner EAP protocol from the list and click OK.
To add other inner EAP protocol to the list, repeat this procedure.
To remove a protocol:
1. Select the protocol to remove.
2. Click Remove.
To reorder protocols:
1. Select a protocol to move.
2. Use the up and down arrow buttons on the TTLS Settings tab of the Profile
Properties dialog to reposition the protocol on the list.
If you select EAP-GenericTokenCard as one of your PEAP inner authentication
methods, you can configure the EAP-GenericTokenCard settings under the
Setting Up Authentication
tab. These settings allow you to choose to use your
password credentials or your token card ID for authentication.
3. Click OK to update the profile configuration.
NOTE: If you select EAP-TLS as an inner authentication method, you must
configure certificate-based user credentials on the Using Certificates subtab of the
Specifying User Info tab.