Administrator Guide

848 | Rules Editing and Namespaces Dell Networking W-ClearPass Policy Manager 6.6 | User Guide
Authentication Namespace Editing Context
The following table describes the Authentication Namespace Attributes parameters:
Attribute
Name
Values
InnerMethod l CHAP
l EAP-GTC
l EAP-MD5
l EAP-MSCHAPv2
l EAP-TLS
l MSCHAP
l PAP
NOTE: The EAP-MD5 authentication type is not supported if you use the W-ClearPass Policy
Manager in the FIPS mode.
OuterMethod l CHAP
l EAP-FAST
l EAP-MD5
l EAP-PEAP
l EAP-TLS
l EAP-TTLS
l MSCHAP
l PAP
NOTE: The EAP-MD5 authentication type is not supported if you use the W-ClearPass Policy
Manager in the FIPS mode.
Phase1PAC l None - No PAC was used to establish the outer tunnel in the EAP-FAST authentication method
l Tunnel - A tunnel PAC was used to establish the outer tunnel in the EAP-FAST authentication
method
l Machine - A machine PAC was used to establish the outer tunnel in the EAP-FAST
authentication method; machine PAC is used for machine authentication (See EAP-FAST in
Adding and Modifying Authentication Methods on page 169).
Phase2PAC l None - No PAC was used instead of an inner method handshake in the EAP-FAST
authentication method
l UserAuthPAC - A user authentication PAC was used instead of the user authentication inner
method handshake in the EAP-FAST authentication method
l PosturePAC - A posture PAC was used instead of the posture credential handshake in the EAP-
FAST authentication method
Posture l Capable - The client is capable of providing posture credentials
l Collected - Posture credentials were collected from the client
l Not-Capable - The client is not capable of providing posture credentials
l Unknown - It is not known whether the client is capable of providing credentials
Status l None - No authentication took place
l User - The user was authenticated
l Machine - The machine was authenticated
l Failed - Authentication failed
Table 448: Authentication Namespace Attributes