Toshiba Magnia Z310 - Manual (Page 83)

4.2.2.2 Authentication type
Several types of authentication are available. The wireless LAN station and RADIUS server need
to predetermine which type of authentication to use mutually. If different types of authentication
are set, the authentication procedure cannot be performed and the authentication of the station
fails. Whether the WEP key can be distributed depends on the authentication type.
The following lists the typical types of authentication.
Name Description
MD5-
Challenge Authentication method using the user name and password
In this type of authentication, the WEP key cannot be distributed.
EAP-TLS Authentication method using a digital certificate. It may be represented
by a "Smart Card or other Certificate."
To use this type of authentication, the certificate needs to be obtained
from the CA and stored in each station.
In this type of authentication, the WEP key can be distributed.
EAP-TTLS TTLS stands for Tunneled TLS. It aims to execute the authentication
more securely and flexibly.
With TTLS, Phase 1 applies the TLS tunnel between the station and
authenticating server. Then in Phase 2, authentication is done in the
tunnel. Since this authentication method is not set as the fixed method,
the EAP authentication mentioned above and the usual PAP and CHAP
authentication methods can also be used if desired. (The authentication
methods that are supported depend on the RADIUS server and client
software.)
With Phase 1, the authentication is more secure. And with Phase 2, the
authentication is more flexible.
PEAP Abbreviation of Protected EAP. The basic concept is the same as with
the EAP-TTLS.