User Manual

Conguring IEEE 802.1X Authentication
52AC-03Y
The machine can connect to an 802.1X network as a client device. A typical 802.1X network consists of a RADIUS server
(authentication server), LAN switch (authenticator), and client de
vices with authentication software (supplicants). If a
device tries to connect to the 802.1X network, the device must go through user authentication in order to prove that
the connection is made by an authorized user. Authentication information is sent to and checked by a RADIUS server,
which permits or rejects communication to the network depending on the authentication result. If authentication fails,
a LAN switch (or an access point) blocks access from the outside of the network.
Select the authentication method from the options below. If necessary, install or register a key pair or CA certicate
before
conguring IEEE 802.1X authentication (
Using CA-issued Key Pairs and Digital Certicates(P. 279
) ).
TLS
The machine and the authentication server authenticate each other by mutually verifying their certicates. A
ke
y pair issued by a certication authority (CA) is required for the client authentication (when authenticating the
machine). For the server authentication, a CA certicate installed via the Remote UI can be used in addition to a
CA certicate preinstalled in the machine.
TTLS
This authentication method uses a user name and password for the client authentication and a CA certicate for
the server authentication. MSCHAPv2 or PAP can be selected as the internal pr
otocol. TTLS can be used with
PEAP at the same time. Enable TLS for the Remote UI before conguring this authentication method (
Using
TLS for Encrypted Communications(P
. 252) ).
PEAP
The required settings are almost the same as those of TTLS. MS-CHAPv2 is used as the internal protocol. Enable
TLS for the Remote UI before conguring this authentication method ( Using TLS for Encrypted
Communications(P
. 252) ).
1
Start the Remote UI and log on in Management Mode.
Starting Remote UI(P. 286)
2
Click [Settings/Registration].
Security
266