NanoEAP

Mocana NanoEAP offers a flexible framework and transport mechanism for AAA (Authentication, Authorization, and Accounting) protocols. More...

Modules
	Callback Functions
	Customizable EAP callbacks.
	Core Functions
	EAP-FAST Functions
	Provides EAP-FAST (EAP-flexible authentication via secure tunnelling) authentication.
	EAP-GTC Functions
	Provides EAP-GTC (EAP-generic token card) authentication.
	EAP-LEAP Functions
	Provides EAP-LEAP (EAP-lightweight EAP) authentication.
	EAP-MD5 Functions
	Provides EAP-MD5 (EAP-message digest 5) authentication.
	EAP-MSCHAPv2 Functions
	Provides EAP-MSCHAPv2 (EAP-Microsoft Challenge-handshake Authentication Protocol, version 2) authentication.
	EAP-PEAP Functions
	Provides EAP-PEAP (EAP-protected EAP) authentication.
	EAP-PSK Functions
	Provides EAP-PSK (EAP-Pre-Shared Key) authentication.
	EAP-RADIUS Functions
	Provides EAP-RADIUS (EAP-remote authentication dial in user service) authentication in passthrough or server mode.
	EAP-SIM & EAP-AKA Functions
	Provides EAP-SIM (EAP-subscriber identity module) and EAP-AKA (EAP-authentication and key agreement) authentication.
	EAP-SRP Functions
	Provides EAP-SRP (EAP-secure remote password) authentication.
	EAP-TLS Functions
	Provides EAP-TLS (EAP-transport layer security) authentication.
	EAP-TTLS Functions
	Provides EAP-TTLS (EAP-tunneled transport layer security) authentication.
	EAP1X Functions
	Provides all EAP1X functions.

Detailed Description

With NanoEAP, you can prevent unauthorized access to your network devices, easily update your security handling, and independently manage multiple users who require unique security configuration.

Additionally, NanoEAP communication can use any communication protocol, including custom and future implementations.

The common NanoEAP API contains functions applicable to any EAP communication, regardless of the methods (authentication mechanism) being negotiated or ultimately chosen.

For detailed information about EAP, including the state machine logic implemented within Mocana NanoEAP, refer to the following RFCs:

• 3748, "Extensible Authentication Protocol (EAP)", available in PDF format: http://www.rfc-editor.org/cgi-bin/rfcdoctype.pl?loc=RFC&letsgo=3748&type=ftp&file_format=pdf
• 4137, "State Machines for Extensible Authentication Protocol (EAP) Peer and Authenticator", available in PDF format: http://www.rfc-editor.org/cgi-bin/rfcdoctype.pl?loc=RFC&letsgo=4137&type=ftp&file_format=pdf

For detailed NanoEAP feature information and integration procedures, refer to the .

To view a full-size version of any of the following NanoEAP flowcharts, click the thumbnail image.

NanoEAP Flowcharts
EAP Common Loop	EAP Common Events: Receive Packet and Send Alert	EAP Common Events: Process Method
EAP MD5	EAP MSCHAPv2	EAP TLS
EAP PEAP, tls state 0	EAP PEAP, tls state 1
EAP PEAP, tls state 2 (1 0f 3)	EAP PEAP, tls state 2 (2 of 3)	EAP PEAP, tls state 2 (3 of 3)

Note

The NanoSec API functions that are related to NSA Suite B cryptography are available only if NanoSec Advanced has been purchased. By default, only NanoSec Basic is included. If your DigiCert product is used with the DigiCert FIPS binaries, then the Suite B algorithms are already included. For more information, contact the DigiCert Support Team via the DigiCert Helpdesk.