Loopcomm LP-7617, User Manual

Page: 72 / 113

72/113

PEAP: Protect Extensible Authentication Protocol. PEAP transport securely
authenticates data by using tunneling between PEAP clients and an authentication
server. PEAP can authenticate wireless LAN clients using only server-side
certificates, thus simplifying the implementation and administration of a secure
wireless LAN.

TLS/Smart Card: Transport Layer Security. Provides for certificate-based and
mutual authentication of the client and the network. It relies on client-side and
server-side certificates to perform authentication and can be used to dynamically
generate user-based and session-based WEP keys to secure subsequent
communications between the WLAN client and the access point.

TTLS: Tunneled Transport Layer Security. This security method provides for
certificate-based, mutual authentication of the client and network through an
encrypted channel. Unlike EAP-TLS, EAP-TTLS requires only server-side
certificates.

EAP-FAST: Flexible Authentication via Secure Tunneling. It was developed by
Cisco. Instead of using a certificate, mutual authentication is achieved by means of
a PAC (Protected Access Credential) which can be managed dynamically by the
authentication server. The PAC can be supplied (distributed one time) to the client
either manually or automatically. Manually, it is delivered to the client via disk or a
secured network distribution method. Automatically, it is supplied as an in-band,
over the air, distribution.
For tunnel authentication, only support "Generic Token
Card" authentication.

LEAP: Light Extensible Authentication Protocol is an EAP authentication type
used primarily by Cisco Aironet WLANs. It encrypts data transmissions using
dynamically generated WEP keys, and supports mutual authentication.

MD5-Challenge: Message Digest Challenge. Challenge is an EAP authentication
type that provides base-level EAP support. It provides for only one-way
authentication - there is no mutual authentication of wireless client and the
network.

Session Resumption: The user can choose "Disable" and "Enable".
Tunnel Authentication:

Protocol: Tunnel protocol, List information include "EAP-MSCHAP v2",
"EAP-TLS/Smart card", "Generic Token Card", "CHAP", "MS-CHAP",
"MS-CHAP-V2", "PAP" and "EAP-MD5".

Tunnel Identity: Identity for tunnel.

Tunnel Password: Password for tunnel.
ID \ PASSWORD

Authentication ID/Password: The identity, password and domain name for server.
Only "EAP-FAST" and "LEAP" authentication can key in domain name. Domain
names can be keyed in the blank space.

Tunnel ID/Password: Identity and Password for the server..
Client Certification