Users Guide

204 | Authentication Methods and Sources Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
Inner Methods Tab
The Inner Methods tab controls the inner methods for the EAP-TTLS method. The following figure is an
example of the EAP-TTLS - Inner Methods tab:
Figure 163: EAP_TTLS - Inner Methods Tab
The following table describes the EAP-TTLS - Inner Methods parameters:
Parameter Description
Specify inner authentication
methods in the preferred
order
Select any method available in the current context from the drop-down list.
Functions available in this tab include:
l To append an inner method to the displayed list, select it from the drop-down
list. The list can contain multiple inner methods, which Policy Manager sends in
priority order until negotiation succeeds.
l To remove an inner method from the displayed list, select the method and click
Remove.
l To set an inner method as the default (the method that tried first), select it and
click Default.
NOTE: The EAP-MD5 authentication type is not supported if you use W-ClearPass
Policy Manager in the FIPS (Administration > Server Manager > Server
Configuration > FIPS tab) mode.
Table 93: EAP-TTLS - Inner Methods Tab Parameters
MAC-AUTH Authentication Method
The MAC_AUTH authentication type must be used exclusively in a MAC-based authentication service.
When the MAC_AUTH method is selected, Policy Manager makes internal checks to verify that the request is a
MAC_Authentication request and not a spoofed request. In tunneled EAP methods, authentication and
posture credential exchanges occur inside a protected outer tunnel.