Dell Powerconnect W-ClearPass Hardware Appliances W-ClearPass Policy Manager 6 - Page 50

Figure 28: Generic Policy Manager Service Flow of Control Table 17: Policy Manager Service Components Component Service: component ratio Description AAuthentication Method Zero or more per service EAP or non-EAP method for client authentication. Policy Manager supports four broad classes of authentication methods: l EAP, tunneled: PEAP, EAP-FAST, or EAP-TTLS. l EAP, non-tunneled: EAP-TLS or EAP-MD5. l Non-EAP, non-tunneled: CHAP, MS-CHAP, PAP, or [MAC AUTH]. [MAC AUTH] must be used exclusively in a MAC-based Authentication Service. When the [MAC AUTH] method is selected, Policy Manager: (1) makes internal checks to verify that the request is indeed a MAC Authentication request (and not a spoofed request) and (2) makes sure that the MAC address of the device is present in the authentication source. Some Services (for example, TACACS+) contain internal authentication methods; in such cases, Policy Manager does not make this tab available. BAuthentication Source Zero or more per service An Authentication Source is the identity repository against which Policy Manager verifies identity. It supports these Authentication Source types: l Microsoft Active Directory 50 Dell Networking W-ClearPass Policy Manager 6.0 | User Guide