SEH primos, Руководство пользователя

Страница: 59 / 78

primos User Manual Security
55
6.7 How to Use Authentication Methods
By means of authentication, a network can be protected against unauthorized access.
primos can participate in various authentication procedures. This section describes which
procedures are supported and how these procedures are configured in primos.
What is IEEE
802.1X?
The IEEE 802.1X standard provides a basic structure for various authentication and key
management protocols. IEEE 802.1X allows you to control the access to networks. Before
users gain access to a network via a network device, they must authenticate themselves
in the network. After the authentication was successful, the access to the network will be
freed.
What is EAP? The standard IEEE 802.1X is based upon the EAP (Extensible Authentication Protocol). EAP
is a universal protocol for many authentication procedures. EAP allows for a standardized
authentication procedure between the network device and an authentication server
(RADIUS). First you must define the authentication procedure (TLS, PEAP, TTLS, etc.) to be
used and configure it on all network devices involved.
What is RADIUS? RADIUS (Remote Authentication Dial-In User Service) is an authentication and account
management system that validates user login information and grants access to the
desired resources.
primos supports various EAP authentication methods in order to authenticate itself in a
protected network.
What Do You
Want to Do?

’Configuring EAP-MD5’

55

’Configuring EAP-TLS’

56

’Configuring EAP-TTLS’

57

’Configuring PEAP’

58

’Configuring EAP-FAST’

59
Configuring EAP-MD5
Benefits and
Purpose
EAP-MD5 validates the identity of devices or users before they gain access to network
resources. You can configure primos for the EAP-MD5 network authentication. This
makes sure that primos gets access to protected networks.
Mode of
Operation
EAP-MD5 describes a user-based authentication method via a RADIUS server. primos
must be defined as user (with user name and password) on a RADIUS server. The
authentication method EAP-MD5 must then be enabled in primos and the user name and
password need to be entered.