User manual FUJITSU SIEMENS ANSWERS 2 WIRELESS LAN

[. . . ] answers Wireless LAN English 2 User Guide Dieses Handbuch wurde auf Recycling-Papier gedruckt. This manual has been printed on recycled paper. Ce manuel est imprimé sur du papier recyclé. Este manual ha sido impreso sobre papel reciclado. [. . . ] Select one or more protocols to add, and click OK. You can select more than one protocol if you hold down Ctrl on your keyboard as you select with your mouse. Note that any protocols you have already selected are not listed in this window. Validating the Server Certificate Certain protocols, such as EAP-TTLS, PEAP, and EAP-TLS, allow you to verify the identity of the authentication server as the server verifies your identity. Mark Validate server certificate to verify the identity of the authentication server based on its certificate when using EAP-TTLS, PEAP, and EAP-TLS. (This field is marked by default. ) You can select trusted authentication server certificates using the Trusted Servers window. Refer to "Specifying trusted servers - "Trusted Servers" window". You should, as a general rule, mark Validate server certificate. As an option, you can deactivate this important security measure, however only when no certificate is required by the server. You should only do so when your network administrator instructs you to. A26391-K133-Z131-1-7619, edition 3 21 Using Odyssey Client "TTLS Settings" tab The TTLS Settings tab lets you configure the use of EAP-TTLS as an authentication protocol. These settings are only relevant when you select EAP-TTLS as one of your authentication protocols in the Authentication tab. EAP-TTLS works by creating a secure, encrypted tunnel through which you present your credentials to the authentication server. Thus, inside EAP-TTLS there is yet another inner authentication protocol that you must configure. 22 A26391-K133-Z131-1-7619, edition 3 Using Odyssey Client Selection of inner authentication protocol Select the desired inner authentication protocol in the Inner Authentication Protocol selection menu. The following protocols are available: PAP CHAP MS-CHAP MS-CHAP-V2 PAP/Token EAP The most commonly used protocol is MS-CHAP-V2. The protocol allows you to be authenticated against a Windows Domain Controller as well as other, non-Windows user databases. CHAP is the most frequently used protocol for the authentication of user databases which do not run under Windows. i You cannot use CHAP as a process for the inner authentication for a Windows NT domain or Active Directory. Therefore, do not use CHAP for authentication on the Odyssey-Server, as it only authenticates itself for a Windows domain or an Active Directory. PAP/Token is the protocol to use with token cards. When you use PAP/Token, the password value you enter into the password dialogue is never cached, since any Token-based password is only good for one use. Check with your network administrator to determine which inner authentication protocol can be used on your network. EAP as inner authentication protocol If you select EAP as your inner authentication protocol, you must configure the list of Inner EAP protocols with one or more protocols. To add a protocol to the list, click Add. Select one or more protocols to add, and click OK. You can select more than one protocol if you hold down Ctrl on your keyboard as you select with your mouse. Note that any protocols you have already added are not listed in this window. [. . . ] If Odyssey Client is not to save the entered passwords, select Forget Password. When your password is needed again, you are prompted to enter it. You might need to use this menu item if you enter your password incorrectly or if your password has been changed on the authentication server. "Forget Temporary Trust" menu item If you enable Temporary trust from Settings - Security Settings, then whenever you encounter an untrusted authentication server, a window pops up. This window allows you to use that server as trusted server temporarily. [. . . ]