SNR S2989G-24TX [306/553] Eap termination mode

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-33

MS-CHAPV2 can be transmitted within TTLS tunnels.

4. PEAP Authentication Method

EAP-PEAP is brought up by Cisco, Microsoft and RAS Security as a recommended

open standard. It has long been utilized in products and provides very good security. Its

design of protocol and security is similar to that of EAP-TTLS, using a server’s PKI

certificate to establish a safe TLS tunnel in order to protect user authentication.

The following figure illustrates the basic operation flow of PEAP authentication

method.

Figure 6-11 the Authentication Flow of 802.1x PEAP

6.2.1.5.2 EAP Termination Mode

In this mode, EAP messages will be terminated in the access control unit and

mapped into RADIUS messages, which is used to implement the authentication,

authorization and fee-counting. The basic operation flow is illustrated in the next figure.

In EAP termination mode, the access control unit and the RADIUS server can use

PAP or CHAP authentication method. The following figure will demonstrate the basic

operation flow using CHAP authentication method.