INTELLINET NETWORK 524995 Wireless 300N Dual-Band USB Adapter User Manual User Manual

Page 18

802.1

etting

/ C

eRtiFiCation

EAP Method: The EAP authentication protocols supported by this

adapter require that settings be consistent with the wireless access

points or routers that the adapter is intended to connect.

• PEAP & TTLS: These protocols are similar and easier to use than

TLS (below) in that they specify a stand-alone authentication protocol

to be used within an encrypted tunnel. TTLS supports any protocol

within its tunnel, including CHAP, MS-CHAP, MS-CHAPv2, PAP and

EAP-MD5. PEAP specifies that an EAP-compliant authentication

protocol be used; this adapter supports EAP-MSCHAP v2, EAP-TLS/

Smart Card and Generic Token Card. The client certificate is optional.

• TLS/Smart Card: This is the most secure of the EAP protocols, but

isn’t easy to use: It requires that digital certificates be exchanged in

the authentication phase. The server presents a certificate to the

client and, after validating the server’s certificate, the client presents

a client certificate to the server for validation.

Session Resumption: Click/check the box to activate or de-activate.

ID/Password: Enter the password as the identity for the server.

Client Certification: A client certificate is required for TLS, but is

optional for TTLS and PEAP. This forces a client certificate to be

selected from the appropriate Windows Certificate Store and made

available to the RADIUS server for certification.

Tunneled Authentication/Protocol: When the authentication type is

PEAP or TTLS, select a protocol for building the encrypted tunnel.

Tunnel Authentication: Select one of three options from the drop-

down menu: “EAP-MSCHAPv2,” “EAP-TLS/Smart card” or “Generic

Token Card.”

CONFIGURATION