Vingtor Stentofon TKIS-2 - Page 68

68
A100K11194
Turbine Station Conguration Guide
The di󰀨erent authentication methods are:
● EAP-MSCHAPV2
● EAP-MD5
● EAP-TTLS with PAP
● PEAP with MSCHAPV2
● EAP-TLS
EAP-MSCHAPV2 and EAP-MD5 will encrypt the password.
EAP-TTLS with PAP and PEAP with MSCHAPV2 will encrypt both the Username and Password.
The parameters to congure depend on the authentication method:
802.1X status: Enable or disable 802.1X.
Username: The user name that identies a station.
Password: The password associated with the user name.
Fake username: The fake user name sent outside of the encrypted tunnel with EAP-TTLS with PAP
and PEAP with MSCHAPV2. The user name is encrypted.
Verifyserverwithcerticate: [EAP-TTLS with PAP, PEAP with MSCHAPV2 and EAP-TLS
only] Species that the client veries that server certicates presented to the client have the correct
signatures, have not expired, and were issued by a trusted root certication authority (CA). It’s
enabled by default.
Fast Re-Authentication: Re-authenticates the clients connected to 802.1x-enabled interfaces.
Get new DHCP on success: If 802.1X authentication is successful, the station will restart its DHCP
client.
InsertCACerticate: [EAP-TTLS with PAP, PEAP with MSCHAPV2 and EAP-TLS only] Uploads
certicate (public key) used by authentication server. This is not required if the Verify server with
certicate option is disabled.
InsertUserPublicCerticate: [EAP-TLS only] Uploads certicate (public key) used by
authentication client (user).
Insert User Private Key: [EAP-TLS only] Uploads the private key that is paired with the user public
certicate.
● Click SAVE to save the current settings
● Click REBOOT
The new 802.1X settings will only come into e󰀨ect after the reboot.