Silex technology BR-310AC, User Manual

Page: 67 / 108

5. List of Functions
61
BR-310AC supports the following IEEE802.1X authentication methods.
In the Web configuration interface of BR-310AC, select
ON
at
IEEE802.1X Authentication
and select the authentication mode at
IEEE802.1X Authentication Type
.
IEEE802.1X Authentication mode
EAP-TLS
EAP-TTLS
PEAP
EAP-FAST
LEAP
IEEE802.1X Authentication
The compatible settings on each authentication mode are as follows.
For details, refer to
Appendix A-1. List of All Settings
.
Name
IEEE802.1X Authentication Mode
EAP-TLS EAP-TTLS PEAP EAP-FAST LEAP
IEEE802.1X User Name Necessary Necessary Necessary Necessary Necessary
Password - Necessary Necessary Necessary Necessary
Inner Authentication Method
- Necessary Necessary - -
Server Certificate Verification - Optional Optional - -
CA Certificate Necessary Optional Optional - -
PAC Auto-distribution - - - Optional -
PAC File - - - Optional -
Client Certificate Necessary - - - -
Password Necessary - - - -
Settings on each authentication mode
Name Details
IEEE802.1X User Name This is an ID and password for the RADIUS server to identify the client.
Password
Inner Authentication Method
Specify the authentication protocol to use.
For PEAP, MSCHAPv2 is used.
Server Certificate Verification Enable/Disable the reliability check of the RADIUS server.
When ON is selected, CA certificate is required to verify the server certificate.
CA Certificate This is a CA certificate to authenticate the RADIUD server.
PAC Auto-distribution Enable/Disable the automatic PAC distribution.
When OFF is selected, the PAC file generated by the RADIUS server is required.
PAC File This is the file used for manual provisioning. This file is generated by the RADIUS
server.
Client Certificate Use this to check the client reliability. To read out the secret key from the client
certificate, a password is required.
Password