Cisco Cisco MGX-FRSM-HS2 B Serial Frame Service Module Information Guide
© 2005 Cisco Systems, Inc. All rights reserved.
Important notices, privacy statements, and trademarks of Cisco Systems, Inc. can be found on cisco.com.
Page 3 of 5
EAP TYPE COMPARISONS
Q.
What are the differences between
Protected EAP
(PEAP),
EAP-Flexible Authentication via Secure Tunneling
(EAP-FAST), Cisco LEAP,
and EAP-Transport Layer Security (EAP-TLS)?
A.
Table 1 provides a summary comparison of PEAP, EAP-FAST, Cisco LEAP, and EAP-TLS.
Table 1.
PEAP, EAP-FAST, Cisco LEAP and EAP-TLS Comparison Chart
PEAP with Generic
Token Card (GTC)
PEAP with Microsoft
Challenge
Authentication
Protocol (MS-CHAP)
Version 2
EAP-FAST
Cisco LEAP
EAP-TLS
User Authentication
Database and
Server
One-time password
(OTP), Lightweight
Directory Access
Protocol (LDAP),
Novell NDS, Windows
NT Domains, Active
Directory
Windows NT
Domains, Active
Directory
Windows NT
Domains, Active
Directory, LDAP
(limited)
Windows NT
Domains, Active
Directory
OTP, LDAP, Novell
NDS, Windows NT
Domains, Active
Directory
Requires Server
Certificates
Yes
Yes
No
No
Yes
Requires Client
Certificates
No
No
No
No
Yes
Operating System
Support
Driver: Windows XP,
Windows 2000,
Windows CE*
With third-party utility:
Other OS**
Driver: Windows XP,
Windows 2000,
Windows CE
With third-party utility:
Other OS**
Driver: Windows XP,
Windows 2000,
Windows CE***
With third-party utility:
Other OS **
Driver: Windows 98,
Windows 2000,
Windows NT,
Windows Me,
Windows XP, Mac
OS, Linux, Windows
CE, DOS
Driver: Windows XP,
Windows 2000,
Windows CE
With third-party utility:
Other OS
ASD Support
No
No
Yes
Yes
No
Credentials Used
Client: Windows,
NDS, LDAP
password; OTP or
token
Server: Digital
certificate
Windows password
Windows password,
LDAP user ID/
password (manual
provisioning required
for Pac provisioning)
Windows
password****
Digital certificate
Single Sign-On
Using Windows
Login
No
Yes
Yes
Yes
Yes
Password
Expiration and
Change
No
Yes
Yes
No
-