User's Manual

names and passwords. This method does not support key management, but
does require a pre-configured key if data encryption is used. It can be safely
deployed for wireless authentication inside EAP tunnel methods.
TLS
A type of authentication method using the Extensible Authentication Protocol
(EAP) and a security protocol called the Transport Layer Security (TLS). EAP-
TLS uses certificates which use passwords. EAP-TLS authentication supports
dynamic WEP key management. The TLS protocol is intended to secure and
authenticate communications across a public network through data
encryption. The TLS Handshake Protocol allows the server and client to
provide mutual authentication and to negotiate an encryption algorithm and
cryptographic keys before data is transmitted.
TTLS
These settings define the protocol and the credentials used to authenticate a
user. In TTLS (Tunneled Transport Layer Security), the client uses EAP-TLS to
validate the server and create a TLS-encrypted channel between the client and
server. The client can use another authentication protocol, typically password-
based protocols, as MD5 Challenge over this encrypted channel to enable
server validation. The challenge and response packets are sent over a non-
exposed TLS encrypted channel. TTLS implementations today support all
methods defined by EAP, as well as several older methods (
PAP, CHAP, MS-
CHAP and MS-CHAPv2). TTLS can easily be extended to work with new
protocols by defining new attributes to support new protocols.
Authentication Protocols
● PAP: Password Authentication Protocol is a two way handshake protocol
designed for use with PPP. Authentication Protocol Password
Authentication Protocol is a plain text password used on older SLIP
systems. It is not secure.
● CHAP: Challenge Handshake Authentication Protocol is a three way
handshake protocol which is considered more secure than PAP (Password
Authentication Protocol).
● MS-CHAP (MD4): Uses a Microsoft version of RSA Message Digest 4
challenge and reply protocol. This only works on Microsoft systems and