EnableEAP Property of the IFPCVpnPPPSettings Interface

Article
08/13/2010

The EnableEAP property gets or sets a Boolean value that indicates whether the Extensible Authentication Protocol (EAP) is enabled. In Forefront TMG, EAP is used only with the Transport Level Security authentication scheme (EAP-TLS) for incoming connections.

C++

HRESULT put_EnableEAP(
    VARIANT_BOOL fEnableEAP
);
HRESULT get_EnableEAP(
    VARIANT_BOOL* pfEnableEAP
);

Parameters

fEnableEAP
Boolean value that indicates whether EAP is enabled.
pfEnableEAP
Pointer to a Boolean variable that is set on return to VARIANT_TRUE if EAP is enabled, or to VARIANT_FALSE if EAP is disabled.

Return Value

These property methods return S_OK if the call is successful; otherwise, they return an error code.

Visual Basic

Property EnableEAP As Boolean

Property Value

Boolean value that indicates whether EAP is enabled.

Remarks

This property is read/write. Its default value is False (VARIANT_FALSE in C++).

EAP can be used to provide an added layer of security to Point-to-Point Protocol (PPP) VPN connections. EAP enables this functionality through certification authority (CA) and smart card technologies, which provide mutual authentication of the VPN client and the VPN server. To use EAP in a VPN scenario, the server must be configured to accept EAP authentication as a valid authentication method and it must have a user certificate (X.509). The client must be configured to use EAP, and either have a smart card (with a smart card certificate installed) or a user certificate.

Multiple EAP types are supported. Enabling EAP through this property adds the EAP-TLS type to the list of EAP types that can be used on the computer, and disabling EAP through this property removes the EAP-TLS type from the list of EAP types. If no EAP type remains on the list, EAP is disabled on the computer.

Requirements

Client	Requires Windows 7 or Windows Vista.
Server	Requires Windows Server 2008 R2 or Windows Server 2008 x64 Edition with SP2.
Version	Requires Forefront Threat Management Gateway (TMG) 2010.
IDL	Declared in Msfpccom.idl.
DLL	Requires Msfpccom.dll.

Share via