designed for use with PPP. Password Authentication Protocol is a plain text
password used on older SLIP systems. It is not secure.
● CHAP: Challenge Handshake Authentication Protocol is a three-way
handshake protocol that is considered more secure than PAP Authentication
Protocol.
● MS-CHAP (MD4): Uses a Microsoft version of RSA Message Digest 4
challenge-and-reply protocol. This only works on Microsoft systems and
enables data encryption. To select this authentication method causes all data
to be encrypted.
● MS-CHAP-V2: Introduces an additional feature not available with MSCHAPV1
or standard CHAP authentication, the change password feature. This feature
allows the client to change the account password if the RADIUS server reports
that the password has expired.
PEAP
PEAP is a new Extensible Authentication Protocol (EAP) IEEE 802.1x authentication
type designed to take advantage of server-side EAP-Transport Layer Security (EAP-
TLS) and to support various authentication methods, including users' passwords and
one-time passwords, and Generic Token Cards.
Authentication Protocols
● Generic Token Card (GTC): Carries user specific token cards for
authentication. The main feature in GTC is Digital Certificate/Token Card-
based authentication. In addition, GTC includes the ability to hide user name
identities until the TLS encrypted tunnel is established, which provides
additional confidentiality that user names are not being broadcasted during
the authentication phase.
● MS-CHAP-V2: See MS-CHAP-V2 above.
● TLS: The TLS protocol is intended to secure and authenticate communications
across a public network through data encryption. The TLS Handshake Protocol
allows the server and client to provide mutual authentication and to negotiate
an encryption algorithm and cryptographic keys before data is transmitted.
See
TLS above.
Cisco Features
NOTE: Cisco Features are not supported on Windows Vista.
Cisco LEAP
To Next Page
Loading...
Need help?
General
