Справочник Пользователя для Iconnect 572

January 13, 2009 / Version: 2.0

 

15 

5.  Specify the 802.1x information if you are using the 802.1X certification method. 

Users that do not use this function or connecting to an open-wireless network please skip this 

part.  

 

 

   

 There are total 5 modes: PEAP, TLS/Smart Card, TTLS, EAP-FAST, and 

MD5-Challenge.  

 There are total 4 modes: PEAP, TLS/Smart Card, EAP-FAST, and LEAP. 

Please select an EAP method from the drop down list.

 

Protect Extensible Authentication Protocol. PEAP transport securely authenticates 

data by using tunneling between PEAP clients and an authentication server. PEAP can 
authenticate wireless LAN clients using only server-side certificates, thus simplifying 
the implementation and administration of a secure wireless LAN. 

Transport Layer Security. Provides for certificate-based and mutual authentication of 
the client and the network. It relies on client-side and server-side certificates to 
perform authentication and can be used to dynamically generate user-based and 

session-based WEP keys to secure subsequent communications between the WLAN 
client and the access point.   

Tunneled Transport Layer Security. This security method provides for 
certificate-based, mutual authentication of the client and network through an 
encrypted channel. Unlike EAP-TLS, EAP-TTLS requires only server-side certificates. 

Flexible Authentication via Secure Tunneling. It was developed by Cisco. Instead of 
using a certificate, mutual authentication is achieved by means of a PAC (Protected 
Access Credential) which can be managed dynamically by the authentication server. 

The PAC can be supplied (distributed one time) to the client either manually or 
automatically. Manually, it is delivered to the client via disk or a secured network 

distribution method. Automatically, it is supplied as an in-band, over the air, 
distribution. For tunnel authentication, only support "Generic Token Card" 

authentication. 

Message Digest Challenge. Challenge is an EAP authentication type that provides 
base-level EAP support. It provides for only one-way authentication - there is no 

mutual authentication of wireless client and the network. 

Light Extensible Authentication Protocol is an EAP authentication type used primarily 
by Cisco Aironet WLANs. It encrypts data transmissions using dynamically generated 

WEP keys, and supports mutual authentication. 

A 

B 

C