Canon iR3245, Network Manual

Page: 48 / 288

2
Settings
Common
to
the
Network
Protocols
2-20 IEEE802.1X Authentication Settings
IEEE802.1X Authentication Settings
This section describes how to set the IEEE802.1X authentication.
For IEEE802.1X, the RADIUS server requires user authentication from the supplicant (machine)
when connecting to a network. EAPOL (EAP over LAN) is used for communication between the
supplicant and the authenticator (LAN switch) that performs access control of the terminal based on
the authentication results. Authentication information is managed collectively with the RADIUS
(Remote Authentication Dial In User Service) server, and then the supplicant is authenticated. Invalid
access can be prevented because this authentication method permits only supplicants authenticated
by the RADIUS server to connect to the network via an authenticator. The authenticator blocks
communication from supplicants not authenticated by the RADIUS server.
The machine supports the following methods of authentications:
Remark
You cannot set the EAP-TLS method and the
EAP-TTLS/PEAP method at the same time.
EAP-TLS (Extensible Authentication Protocol-Transport Level Security)
For the EAP-TLS method, authentication is performed by issuing a digital certificate bilaterally to both
the client and the RADIUS server. The key pair and client certificate sent from the machine are
verified using the CA certificate on the RADIUS server. The server certificate sent from the RADIUS
server is verified using the CA certificate on the client (the machine). The CA certificate used to verify
the server certificate must be registered. For information on installing the CA certificate file using the
Remote UI, see the Remote UI Guide For information on registering the installed CA certificate file,
see "Registering a CA Certificate File Installed from a Computer(p.3-47)."
Furthermore, the settings for the key pair (in PKCS#12 format) and the client certificate are necessary
to use the EAP-TLS with the machine. After installing the key pair file and client certificate file using
the Remote UI (see the Remote UI Guide"), set the key pair and client certificate for EAP-TLS as the
default key with the control panel of the machine.
Acesst 1.0 6251194