VPN Authentication Methods

Question 1

EAP-TLS

Answer 1

Used with Smart cards of digital certificates

Can only be used when RRAS is configured for RADIUS authentication, or if the server is domain joined

Question 2

MS-CHAPv2

Answer 2

Provides Mutual Authentication

Allows for encryption of authentication process and session

Question 3

Machine Certificate Authentication

Answer 3

Uses pre-installed certificates that correspond with machines as opposed to users

Requires certificate with Server Authentication EKU property on RRAS server

Requires certificate with Client Authentication EKU property on each connecting client that is stored in Local Computer / Personal

Question 4

CHAP

Answer 4

Authentication is encrypted via MD5 hashing

Session data is not encrypted

Question 5

SPAP

Answer 5

Included for down-level support

Basic encryption for authentication that can be trivially decrypted via automated techniques

Not recommended

Question 6

PAP

Answer 6

No Encryption for Session Data or Authentication