Conî ´guring the IEEE 802.1X Authentication Settings
13WK-0C5
In a network environment that uses IEEE 802.1X authentication, unauthorized network access is blocked by a LAN
switch (authenticator) that only grants access privileges to client devices (supplicants) that are authorized by the
authentication server (RADIUS server). To connect this machine to an IEEE 802.1X network, settings such as the
authentication method used by the authentication server must be conî ´gured on the machine. Administrator or
NetworkAdmin privileges are required in order to conî ´gure these settings.
IEEE 802.1X Authentication Method
The machine supports the authentication methods described below. You must register a CA certiî ´cate before
using any of these authentication methods. Registering a CA Certiî ´cate(P. 667)
EAP-TLS (Extensible Authentication Protocol-Transport Level Security)
The machine and the authentication server authenticate each other by mutually sending certiî ´cates. A CA
certiî ´cate must be registered on the machine to verify the certiî ´cate (server certiî ´cate) sent from the
authentication server. In addition, a PKCS#12 format key and certiî ´cate (client certiî ´cate) must be speciî ´ed
in this setting, so that the authentication server can authenticate the machine. Register these items before
conî ´guring the settings (
Registering a Key and Certiî ´cate(P. 666) ). This authentication method cannot
be used in combination with the other methods.
EAP-TTLS (EAP-Tunneled TLS)
Only the authentication server sends a certiî ´cate. A CA certiî ´cate must be registered on the machine to
verify the certiî ´cate (server certiî ´cate) sent from the authentication server. In addition, a user name and
password need to be speciî ´ed in these settings, so that the authentication server can authenticate the
machine. Microsoft Challenge Handshake Authentication Protocol Version 2 (MS-CHAPv2) or Password
Authentication Protocol (PAP) can be selected as the internal authentication protocol to support EAP-TTLS.
PEAP (Protected EAP)
Only the authentication server sends a certiî ´cate. A CA certiî ´cate must be registered on the machine to
verify the certiî ´cate (server certiî ´cate) sent from the authentication server. In addition, a user name and
password need to be speciî ´ed in these settings, so that the authentication server can authenticate the
machine. Only MS-CHAPv2 can be selected as the internal authentication protocol to support PEAP.
Setting the IEEE 802.1X Authentication Method
1
Press .
2
Press <Preferences> <Network> <IEEE 802.1X Settings>.
Managing the Machine
613
To Next Page
Loading...
Need help?
General
