5 how to configure eap-fast, How to configure eap-fast – Dascom 7010 PrintServer Manual User Manual
Page 96

Print Server Network Authentication
Print Server User Manual
96
9.5
How to Configure EAP-FAST
Benefits and
Purpose
EAP-FAST (Flexible Authentication via Secure Tunneling) validates
the identity of devices or users before they gain access to network
resources. You can configure the print server for the EAP-FAST
network authentication. This makes sure that the print server gets
access to protected networks.
Basic Functions
EAP-FAST uses (as in the case of EAP-TTLS; see
91) a channel in
order to protect the data transfer. The main difference is that
EAP-FAST does not require certificates for authentication purposes.
(The use of certificates is optional).
PACs (Protected Access Credential) are used to build the channel.
PACs are credentials that comprise up to three components.
• A shared secret key that contains the preshared key between the
print server and the RADIUS server.
• An opaque part that is provided to the print server and
presented to the RADIUS server when the print server wishes to
obtain access to network resources.
• Other information that may be useful to the client. (optional)
EAP-FAST uses two methods to generate PACs:
• The manual delivery mechanism can be every mechanism that
the administrator configures and considers to be safe for the
network.
• In the case of the automatic delivery, an encrypted channel is
established in order to protect the print server authentication as
well as the delivery of PACs.
Requirements
;
The print server is defined as user (with user name and password)
on a RADIUS server.
What do you want
to do?
’Enabling EAP-FAST via the PRINTSERVER Homepage’