eap-method

eap-method <1-10>

A maximum of 10 (ten) authentication methods can be specified for every NAI realm. After creating the EAP authentication method, specify the associated authentication mechanisms (method types).

<1-255>

fast

Specifies the EAP authentication method type as FAST (Flexible Authentication via Secure Tunneling)

gtc

Specifies the EAP authentication method type as GTC (Generic Token Card)

identity

Specifies the EAP authentication method type as Identification

ikev2

Specifies the EAP authentication method type as IKEv2 (Internet Key Exchange Protocol version 2)

ms-auth

Specifies the EAP authentication method type as MS-Auth (Microsoft Authentication)

mschapv2

Specifies the EAP authentication method type as MSCHAPv2 (Microsoft Challenge Handshake Authentication Protocol Version 2)

opt

Specifies the EAP authentication method type as OTP (One Time Password)

peap

Specifies the EAP authentication method type as PEAP (Protected Extensible Authentication Protocol)

psk

Specifies the EAP authentication method type as PSK (Pre-shared Key)

rsa-public-key

Specifies the EAP authentication method type as RSA public key protocol

sim

Specifies the EAP authentication method type as GSM SIM (Subscriber Identity Module)

tls

Specifies the EAP authentication method type as TLS (Transport Layer Security)

ttls

Specifies the EAP authentication method type as TTLS (Tunneled Transport Layer Security)

auth-param

After specifying the EAP authentication method type, specify the authentication parameters. These parameters depend on the EAP authentication mechanism selected.

• cert – Certificate
• hw-token – Hardware token
• nfc-secure-elem – NFC secure element
• none – No credential
• sim – Subscriber identity module
• soft-token – Soft token
• username-password – Username and password
• usim – Universal subscriber identity module
• vendor – Vendor specific credential

If setting the authentication type to either non-eap-inner, inner-eap, credential, or tunneleap-credential, define an authentication value that must be shared with the EAP credential validation server resource.

If setting the authentication type to either expanded-eap or expanded-inner-eap, set a required authentication vendor ID that must match the one utilized by the EAP server resource. The ID must be 6 characters in length.

If required, enter a 2 - 510 character vendor-specific authentication data required for the selected authentication type. Enter the value in the a-FA -F0-9 format.

Provide an authentication vendor type, used exclusively for the expanded-eap or expanded-inner-eap authentication types. The vendor type must be 8 characters in length.