primos User Manual
Security
59
Configuring EAP-FAST
Benefits and
Purpose
EAP-FAST (Flexible Authentication via Secure Tunneling) validates the identity of devices
or users before they gain access to network resources. You can configure primos for the
EAP-FAST network authentication. This makes sure that primos gets access to protected
networks.
Mode of
Operation
EAP-FAST uses (as in the case of EAP-TTLS
57) a channel in order to protect the data
transfer. The main difference is that EAP-FAST does not require certificates for
authentication purposes. (The use of certificates is optional.)
PACs (Protected Access Credentials) are used to build the channel. PACs are credentials
that comprise up to three components.
• A shared secret key that contains the preshared key between primos and the RADIUS
server.
• An opaque part that is provided to primos and presented to the RADIUS server when
primos wishes to obtain access to network resources.
• Other information that may be useful to the client. (Optional)
EAP-FAST uses two methods to generate PACs:
• The manual delivery mechanism can be every mechanism that the administrator
configures and considers to be safe for the network.
• In the case of the automatic delivery, an encrypted channel is established in order to
protect the authentication of primos as well as the delivery of the PACs.
Requirements
primos is defined as user (with user name and password) on a RADIUS server.
1. Start the primos Control Center.
2. Select
SECURITY – Authentication
.
3. Select
FAST
from the
Authentication method
list.
4. From the list
EAP root certificate
choose the root CA certificate of the certification
authority that has issued the certificate of the authentication server (RADIUS).
(Optional) The certificate increases the security when establishing the connection.
(The root CA certificate must have been installed in primos previously
.)
5. In the
Anonymous name
box enter the name for the unencrypted part of the EAP-
FAST authentication.
6. From the list
Inner authentication
choose the method intended to secure the com-
munication in the TLS channel.
7. From the
FAST provisioning
box choose the provisioning mechanism for PACs.
8. Enter the
User name
and
Password
that are used for the configuration of primos on
Summary of Contents for primos
Page 1: ...User Manual...
