User's Manual
802.1x
Setting
802.1x is a authentication for "WPA" and "WPA2" certificate to server.
Authentication type :
PEAP : Protect Extensible Authentication Protocol. PEAP transport securely authentication data
by using tunneling between PEAP clients and an authentication server. PEAP can authenticate
wireless LAN clients using only server-side certificates, thus simplifying the implementation and
administration of a secure wireless LAN.
TLS/Smart Card : Transport Layer Security. Provides for certificate-based and mutual
authentication of the client and the network. It relies on client-side and server-side certificates to
perform authentication and can be used to dynamically generate user-based and session-based
WEP keys to secure subsequent communications between the WLAN client and the access point.
TTLS : Tunneled Transport Layer Security. This security method provides for certificate- based,
mutual authentication of the client and network through an encrypted channel. Unlike EAP-TLS,
EAP-TTLS requires only server-side certificates.
EAP-FAST : Flexible Authentication via Secure Tunneling. It was developed by Cisco.
Instead of using a certificate, mutual authentication is achieved by means of a PAC (Protected
Access Credential) which can be managed dynamically by the authentication server. The PAC can
be provisioned (distributed one time) to the client either manually or automatically. Manual
provisioning is delivery to the client via disk or a secured network distribution method. Automatic
provisioning is an in-band, over the air, distribution.
For tunnel authentication, only support
"Generic Token Card" authentication now.
LEAP : Light Extensible Authentication Protocol. It is an EAP authentication type used
primarily in Cisco Aironet WLANs. It encrypts data transmissions using dynamically generated
WEP keys, and supports mutual authentication.
MD5-Challenge: Message Digest Challenge. Challenge is an EAP authentication type that provides
base-level EAP support. It provides for only one-way authentication - there is
no mutual authentication of wireless client and the network.
Session Resumption : user can choose "Disable" and "Enable". Tunnel
- 79 -