Moxa Technologies AirWorks AWK-1131A - Page 34

AirWorks AWK-1131A Web Console Configuration
3-17
Because the inner and oute
r
authentications can use distinct
user names in TTLS and PEAP,
you can use an anonymous user
name for the outer
authentication, with the true
user name only shown through
the encrypted channel. Keep in
mind that not all client software
supports anonymous alteration.
Confirm this with the network
administrator
before
you enable
identity hiding in TTLS and
PEAP.
TTL inner authentication
Setting Description Factory Default
PAP Password Authentication Protocol is used MS-CHAP-V2
CHAP Challenge Handshake Authentication Protocol is used
MS-CHAP Microsoft CHAP is used
MS-CHAP-V2 Microsoft CHAP version 2 is used
Anonymous
Setting Description Factory Default
Max. of 31 characters A distinct name used for outer authentication None
User name & Password
Setting Description Factory Default
User name and password used in inner authentication None
PEAP
There are a few differences in
the TTLS and PEAP inner
authentication procedures.
TTLS uses the encrypted
channel to exchange
attribute
-value pairs (AVPs),
while PEAP uses the encrypted
channel to start a second EAP
exchange inside of the tunnel.
The
AWK-1131A provides
MS
-CHAP-V2
merely as an EAP
method for inner
authentication.
Inner EAP protocol
Setting Description Factory Default
MS-CHAP-V2 Microsoft CHAP version 2 is used MS-CHAP-V2