Dell PowerConnect W Clearpass 100 Software Podręcznik Użytkownika Pobierz pdf (Strona 120)

120120 | Authentication

Dell PowerConnect W-Series Aruba Instant 6.2.1.0-3.3 | User Guide

l EAP-PEAP (MSCHAPv2)— EAP-PEAP is an 802.1X authentication method that uses server-side public key

certificates to authenticate clients with server. The PEAP authentication creates an encrypted SSL / TLS tunnel

between the client and the authentication server. Exchange of information is encrypted and stored in the tunnel

ensuring the user credentials are kept secure.

l LEAP— Lightweight Extensible Authentication Protocol (LEAP) uses dynamic WEP keys for authentication

between the client and authentication server.

To use OAW-IAP’s internal database for user authentication, add the names and passwords of the users to be

authenticated.

Alcatel-Lucent does not recommend the use of LEAP authentication method, because it does not provide

any resistance to network attacks.

Authentication Termination on OAW-IAP

AOS-W Instant allows Extensible Authentication Protocol (EAP) termination for Protected Extensible Authentication

Protocol (PEAP)-Generic Token Card (PEAP-GTC) and Protected Extensible Authentication Protocol-Microsoft

Challenge Authentication Protocol version 2 (PEAP-MSCHAV2). PEAP-GTC termination allows authorization

against an Lightweight Directory Access Protocol (LDAP) server and external RADIUS server while PEAP-

MSCHAV2 allows authorization against an external RADIUS server.

This allows the users to run PEAP-GTC termination with their username and password to a local Microsoft Active

Directory server with LDAP authentication.

l EAP-Generic Token Card (GTC)— This EAP method permits the transfer of unencrypted usernames and

passwords from client to server. The main uses for EAP-GTC are one-time token cards such as SecureID and

the use of LDAP or RADIUS as the user authentication server. You can also enable caching of user credentials

on the OAW-IAP to an external authentication server for user data backup.

l EAP-Microsoft Challenge Authentication Protocol version 2 (MS-CHAPv2)— This EAP method is widely

supported by Microsoft clients. A RADIUS server must be used as the back-end authentication server.

Understanding Encryption Types

Encryption is the process of converting data into a cryptic format or code when it is transmitted on a network.

Encryption prevents unauthorized use of the data.

Instant supports the following types of encryption:

l WEP —Wired Equivalent Privacy (WEP) is an authentication method where all users share the same key. WEP

is not secure as other encryption types such as TKIP.

l TKIP —Temporal Key Integrity Protocol (TKIP) uses the same encryption algorithm as WEP. However, TKIP is

more secure and has an additional message integrity check (MIC).

l AES — The Advanced Encryption Standard (AES) encryption algorithm a widely supported encryption type for all

wireless networks that contain any confidential data. AES in Wi-Fi leverages 802.1X or PSKs to generate per

station keys for all devices. AES provides a high level of security like IP Security (IPsec) clients.

WEP and TKIP are limited to WLAN connection speed of 54 Mbps. The 802.11n connection supports

only AES encryption. Alcatel-Lucent recommends AESencryption. Ensure that all devices that do not

support AES are upgraded or replaced with the devices that support AES encryption.

WPA and WPA2

WPA is created based on a draft of 802.11i, which allowed users to create more secure WLANs. WPA2

encompasses the full implementation of the 802.11i standard. WPA2 is a superset that encompasses the full WPA

1 2 ... 115 116 117 118 119 120 121 122 123 124 125 ... 295 296

Dell PowerConnect W Clearpass 100 Software Podręcznik Użytkownika Strona 120

Komentarze do niniejszej Instrukcji

Dell PowerConnect W Clearpass 100 Software Podręcznik Użytkownika Strona 120

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Oprogramowanie Dell PowerConnect W Clearpass 100 Software