User's Manual Part 2

Chapter 5 — Network Support
146 PRELIMINARY - CN3 Mobile Computer User’s Manual
EAP-FAST (EAP-Flexible Authentication via Secured Tunnel)
The EAP-FAST protocol is a client-server security architecture that
encrypts EAP transactions with a TLS tunnel. While similar to PEAP, it
differs significantly as EAP-FAST tunnel establishment is based on strong
secrets unique to users. These secrets are called Protected Access Credentials
(PACs), which CiscoSecure ACS generates using a master key known only
to CiscoSecure ACS. Because handshakes based upon shared secrets are
intrinsically faster than handshakes based upon PKI, EAP-FAST is the sig-
nificantly faster of the two solutions that provide encrypted EAP transac-
tions. No certificate management is required to implement EAP-FAST.
Use “EAP-FAST” to configure the use of EAP-FAST as an authentication
protocol, select “Open,” “WPA,” “Network EAP” as an association mode.
1 Set 8021x Security as “EAP-FAST,” then choose one of the following:
•Set Association to “Open.”
•Set Association to “WPA.”
•Set Association to “WPA2.”
•Set Association to “Network EAP” and Encryption to either “WEP”
or “CKIP.”
2 Enter your unique Username to use this protocol.
3 Select Prompt for password to have the user enter this password each
time to access the protocol, or leave Use following password as selected
and enter your unique password to use the protocol without entering a
password each time you use your CN3 Computer.
4 Tap Additional Settings to set options for PAC management and assign
an anonymous EAP-FAST name.
Additional Settings
1 Tap PAC Manager to view the PAC files currently installed on your
CN3 Computer. Tap ok to return to the Additional Settings screen.
2 If you already have a PAC on your CN3 Computer, clear Allow Auto-
matic PAC provisioning to avoid receiving additional PACs from the
server.