Dolphin® 9500 Series Mobile Computer User’s Guide
7 - 47
Cisco LEAP
The message exchange used by Cisco LEAP is proprietary. This protocol is not a standard EAP type, but is supported by the
Client through a licensing arrangement with Cisco.
Relative Merits of Authentication Protocols
MD5 is the least secure of the EAP protocols as it only does a one-way authentication, and does not support automatic
distribution and rotation of WEP keys, increasing the administrative burden of manual WEP key maintenance.
TLS, while the most secure EAP protocol, requires client certificates to be installed on each wireless client. Establishing and
maintaining this PKI infrastructure is normally a burden most administrators do not feel is worth the extra level of security gained.
TTLS and PEAP bypassed the certificate issue by tunneling TLS, and thus eliminating the need for a certificate on the client side.
PEAP supports only EAP-compliant authentication protocols within the tunnel structure, and is rapidly becoming the most widely
supported of the EAP methods. TTLS supports pre-EAP authentication protocols within the tunnel structure, and should be used
in those circumstances when pre-EAP interior protocols are desirable.
LEAP is a pre-EAP, Cisco-proprietary protocol, with many of the features of EAP protocols. Cisco controls the ability of other
vendors to implement this protocol, so it should be selected for use only when limited vendor choice for client, access-point, and
server products is not a concern.
Differences Between Protocols
Security Feature
MD5
Challenge
TLS
TTLS
PEAP
LEAP
Client -side certificate required?
No
Yes
No
No
No
Server-side certificate required?
No
Yes
No
Yes
No
Dynamic WEP Re-keying
No
Yes
Yes
Yes
Yes
Mutual or One-way Authentication?
One-way
Mutual
Mutual
Mutual
Mutual
Support of non-EAP protocols within
a secure tunnel?
N/A
N/A
Yes
No
N/A
Relative Deployment Complexity
Simple
Difficult
Moderate
Moderate
Moderate
Relative Security
Poorest
Highest
High
High
High
Summary of Contents for Dolphin 9500
Page 1: ... User s Guide Dolphin 9500 Series Mobile Computer Windows Mobile Software for Pocket PCs 2003 ...
Page 20: ...1 10 Dolphin 9500 Series Mobile Computer User s Guide ...
Page 106: ...5 34 Dolphin 9500 Series Mobile Computer User s Guide Preliminary Draft Rev c ...
Page 164: ...7 48 Dolphin 9500 Series Mobile Computer User s Guide ...
Page 224: ...9 30 Dolphin 9500 Series Mobile Computer User s Guide ...
Page 258: ...11 8 Dolphin 9500 Series Mobile Computer User s Guide ...
Page 302: ...16 4 Dolphin 9500 Series Mobile Computer User s Guide ...
Page 312: ...A 10 Dolphin 9500 Series Mobile Computer User s Guide ...
Page 313: ......
Page 314: ... HHP Inc 700 Visions Drive P O Box 208 Skaneateles Falls NY 13153 0208 95 9550 WMS UG Rev C ...