Network Authentication
TPG User Manual
70
7.3
How to Configure EAP-TTLS
Benefits and
Purpose
EAP-TTLS (Tunneled Transport Layer Security) validates the identity
of devices or users before they gain access to network resources. You
can configure the TPG for the EAP-TTLS network authentication.
This makes sure that the TPG gets access to protected networks.
Basic Functions
EAP-TTLS consists of two phases:
• During phase 1, a TLS-encrypted channel between the TPG and
the RADIUS server will be established. Only the RADIUS server
authenticates itself using a certificate that was signed by a CA.
This process is also referred to as ’outer authentication’.
• In phase 2, an additional authentication method is used for the
communication within the TLS channel. EAP-defined methods and
older methods (CHAP, PAP, MS-CHAP und MS-CHAPv2) are
supported. This process is also referred to as ’inner authentication’.
The advantage of this procedure is that only the RADIUS server
needs a certificate. Therefore no PKI is needed. Moreover, TTLS sup-
ports most authentication protocols.
To make the connection more secure, you can install the root certi-
ficate of the RADIUS server on the TPG (Phase 1). The TPG validates the
identity of the RADIUS server by means of the certificate.
Requirements
;
The TPG is defined as user (with user name and password) on a
RADIUS server.
What do you want
to do?
’Enabling EAP-TTLS via the TPG Homepage’
Ö
70
’Enabling EAP-TTLS via the InterCon-NetTool’
Ö
71
Enabling EAP-TTLS via the TPG Homepage
Proceed as follows:
1. Start the TPG Homepage.