SEH TPG-65 User Manual download pdf (Page 67)

Security

TPG User Manual 67

Configuring EAP-FAST

Benefits and

Purpose

EAP-FAST (Flexible Authentication via Secure Tunneling) validates

the identity of devices or users before they gain access to network

resources. You can configure the TPG for the EAP-FAST network

authentication. This makes sure that the TPG gets access to

protected networks.

Mode of Operation

EAP-FAST uses (as in the case of EAP-TTLS, see Ö65) a channel in

order to protect the data transfer. The main difference is that

EAP-FAST does not require certificates for authentication purposes.

(The use of certificates is optional.)

PACs (Protected Access Credentials) are used to build the channel.

PACs are credentials that comprise up to three components.

• A shared secret key that contains the preshared key between the

TPG and the RADIUS server.

• An opaque part that is provided to the TPG and presented to the

RADIUS server when the TPG wishes to obtain access to network

resources.

• Other information that may be useful to the client. (Optional)

EAP-FAST uses two methods to generate PACs:

• The manual delivery mechanism can be every mechanism that

the administrator configures and considers to be safe for the

network.

• In the case of the automatic delivery, an encrypted channel is

established in order to protect the authentication of the TPG as

well as the delivery of the PACs.

Requirements

; The TPG is defined as user (with user name and password) on a

RADIUS server.

Proceed as follows:

1. Start the TPG Control Center.

2. Select SECURITY – Authentication.

1 2 ... 62 63 64 65 66 67 68 69 70 71 72 ... 106 107

No comments

SEH TPG-65 User Manual Page 67