IEEE802.1X Authentication Settings2-10Connecting the Machine to a TCP/IP Network2■ EAP-TTLS (Tunneled TLS)EAP-TTLS requires only the RADIUS server to issue a digital certificate. Theserver certificate sent from the RADIUS server is verified using the CA certificateon the client machine. The client machine is required to provide the user name/login name and password in order to authenticate itself to the server. As aninternal authentication protocol, MS-CHAPv2 or PAP is available for selection.■ PEAP (Protected EAP)When PEAP is selected, only the RADIUS server issues a digital certificate. Theserver certificate sent from the RADIUS server is verified using the CA certificateon the client machine. The client machine is required to provide the user name/login name and password in order to be authenticated by the server. With PEAP,the machine uses MS-CHAPv2 as the internal authentication protocol.Selecting the IEEE802.1X Authentication MethodFollow the procedure below to enable the IEEE802.1X authentication and selectthe EAP method.NOTE• Before you select the IEEE802.1X Settings, make sure that the required key pairs anddigital certificates are registered in the machine. (See “Managing Key Pairs and DigitalCertificates,” on p. 3-20.)• If you are going to select EAP-TLS, install and register the key and certificatebeforehand. (See Chapter 2, “Managing Jobs and Machine Data,” in the Remote UIGuide.)1 Press (Additional Functions)➞ [System Settings] ➞ [NetworkSettings].
