User's Manual

Setting up Profile Security
protocols, such as MD5 Challenge over this encrypted channel to enable server validation. The challenge and response packets are sent over a non-
exposed TLS encrypted channel.
Name Description
Step 1 of 2: TTLS User
Authentication Protocol
This parameter specifies the authentication protocol operating over the TTLS tunnel. The protocols are:
PAP, CHAP, MD5, MS-CHAP and MS-CHAP-V2.
Using PAP, CHAP, MD5, MS-CHAP, and MS-CHAP-V2 protocols:
● Use the Windows logon user name and password: If this feature is selected the user’s
credentials are retrieved from the user’s Windows Logon process.
● Prompt for the user name and password: Selecting this feature prompts for user name and
password before you connect to the wireless network. The user name and password must be first
set in the authentication server by the administrator.
● Use the following user name and password: The user name and password are securely
(encrypted) saved in the profile
● User Name: This user name must match the user name that is set in the authentication
server.
● Password: This password must match the password that is set in the authentication server.
The entered password characters display as asterisks.
● Confirm Password: Re-enter the user password.
Use Client Certificate
Select: A client certificate from the Personal certificate store of the Windows logged-in user, this
certificate is used for client authentication.
Roaming Identity
When using 802.1x MS RADIUS as an authentication server, the authentication server authenticates the
device by using the "Roaming Identity" username from Inte. PROSet/Wireless and ignores the
"Authentication Protocol MS-CHAP-V2" User Name. This feature is the 802.1x identity supplied to the
authenticator. Microsoft IAS RADIUS accepts only a valid username (dotNet user) for EAP clients. Enter
a valid username when using 802.1x MS RADIUS. For all other servers, this is an optional field,
therefore, it is recommended that this field not contain a true identity, but instead the desired realm (e.g.,
anonymous@myrealm).
Step 2 of 2: TTLS Server
file:///C|/CX2%20Muroc%20UG/6-15-04/wepsetup.htm (13 of 19) [6/15/2004 3:40:10 PM]