IEEE802.1X Authentication Settings
2-10
Co
nn
e
c
tin
g
th
e Ma
ch
in
e
to
a TC
P/IP
Ne
twor
k
2
■
EAP-TTL
S
(Tunneled TL
S
)
EAP-TTLS requires only the RADIUS server to issue a digital certificate. The
server certificate sent from the RADIUS server is verified using the CA certificate
on the client machine. The client machine is required to provide the user name/
login name and password in order to authenticate itself to the server. As an
internal authentication protocol, MS-CHAPv2 or PAP is available for selection.
■
PEAP (Protected EAP)
When PEAP is selected, only the RADIUS server issues a digital certificate. The
server certificate sent from the RADIUS server is verified using the CA certificate
on the client machine. The client machine is required to provide the user name/
login name and password in order to be authenticated by the server. With PEAP,
the machine uses MS-CHAPv2 as the internal authentication protocol.
Selecting the IEEE802.1X Authentication Method
Follow the procedure below to enable the IEEE802.1X authentication and select
the EAP method.
NOTE
•
Before you select the IEEE802.1X Settings, make sure that the required key pairs and
digital certificates are registered in the machine. (See “Managing Key Pairs and Digital
Certificates,” on p. 3-20.)
•
If you are going to select EAP-TLS, install and register the key and certificate
beforehand. (See Chapter 2, “Managing Jobs and Machine Data,” in the
Remote UI
Guide
.)
1
Pre
ss
(Additional Function
s
)
➞
[
S
y
s
tem
S
ettin
gs
]
➞
[Network
S
ettin
gs
].
