eap-10----Page:9
1  2  3  4  5  6  7  8  9  10  11  12  13  14  15  16  17  18 

Solution Concepts
All methods
Use separate credentials inside and outside tunnels
Use methods inside tunnels always

Key deriving methods
Can use cryptographic binding
Binding can provide stronger authentication & session keys
Avoids policy synchronization issues
Preserves deployment convenience of one-way authenticated tunnels
PPT Version