Motorola CB3000 - Client Bridge - Wireless Access Point, User Manual

Page: 39 / 106

Network Configuration
3-15
.
Figure 3.8 WPA1 Enterprise Type - EAP-TTLS
Inner Authentication
Method Select the authentication method used inside the tunnel. Select from:
• CHAP – Challenge-Handshake Authentication Protocol (CHAP) provides
security by the Challenge-Response method of authentication.
• MS CHAP - Microsoft CHAP (MS CHAP) is Microsoft’s implementation of
the CHAP protocol.
• MS CHAP v2 – An enhanced version of MS CHAP that plugs some
security loopholes of MS CHAP.
• PAP – Password Authentication Protocol (PAP) is a basic authentication
protocol that transmits unencrypted ASCII passwords over the network.
• MD5 – Message Digest algorithm 5 (MD5) is a cryptographic hash
algorithm that uses a 128-bit hash value.
• GTC – Generic Token Card (GTC) is a protocol that enables the exchange
of clear-text authentication credentials across a network. This protocol
uses one-time password and therefore is not vulnerable to replay attacks.
EAP-GTC is generally used inside a tunnel created by TTLS or PEAP to
provide server authentication.
Validate Server
Certificate Check to force the CB3000 to validate the Server Certificate.
Clean User ID and
Password Check to prevent the CB3000 from saving the WPA user name and its
password in its cache.