Chapter 3 — Configuring the Computer
CN3 Series Mobile Computer User’s Manual 79
The CN3 provides three types of security for your wireless
network: Wi-Fi Protected Access 2 (WPA2/802.11i), WPA, and
WEP. 802.1x should be referred to as an authentication method
used for WPA and WPA2. Another authentication method for
WPA and WPA2 would be the Pre-Shared Key (PSK).
Choosing Between Microsoft and Funk Security
Before you can implement a security solution on the CN3, you
need to choose between Microsoft and Funk security:
• By default, Funk security is enabled. It provides everything
you get with Microsoft security plus the addition of Cisco
Compatible Extensions features. It also provides additional
authentication types like EAP-TTLS, LEAP, and EAP-FAST.
LEAP Lightweight Extensible Authentication Protocol.
Also known as Cisco-Wireless EAP, provides
username/password based authentication between a
wireless client and a RADIUS server. In the 802.1x
framework, traffic cannot pass through a wireless
network access point until it successfully
authenticates itself.
EAP-TTLS
Tunneled Transport Layer Security. This protocol
provides authentication like EAP-TLS but does not
require certificates for every user. Instead,
authentication servers are issued certificates. User
authentication is done using a password or other
credentials that are transported in a securely
encrypted “tunnel” established using server
certificates.
EAP-TTLS works by creating a secure, encrypted
tunnel through which you present your credentials
to the authentication server. Thus, inside EAP-
TTLS there is another inner authentication
protocol that you must configure via Additional
TTLS Settings.
Authentication Terminology (continued)
Acronym Description