Figure 1:
Dell Networking W-ClearPass Policy Manager Flow of Control
Component
Service:
component ratio
Description
A
- Authentication Method
Zero or more per
service
EAP or non-EAP method for client authentication.
Policy Manager supports four broad classes of authentication
methods:
l
EAP, tunneled:
PEAP, EAP-FAST, or EAP-TTLS.
l
EAP, non-tunneled:
EAP-TLS or EAP-MD5.
l
Non-EAP, non-tunneled:
CHAP, MS-CHAP, PAP, or MAC-
AUTH.
l
MAC_AUTH must be used exclusively in a MAC-based
Authentication Service. When the MAC_AUTH method is
selected, Policy Manager: (1) makes internal checks to
verify that the request is indeed a
MAC Authentication
request (and not a spoofed request) and (2) makes sure
that the MAC address of the device is present in the
authentication source.
Table 1:
Policy Manager Service Components
2
Dell Networking W-ClearPass Policy Model 6.0 | An Introduction