Advanced Wireless Communications MINI PRO Podręcznik Użytkownika Pobierz pdf (Strona 72)

This section describes security common used by larger companies.

Overview

What is Radius?

How 802.1X Authentication Works

802.1X Features

Overview

The 802.1X authentication is independent of the 802.11 authentication process. The 802.11

standard provides a framework for various authentication and key-management protocols.

There are different 802.1X authentication types and each provides a different approach to

authentication, but all employ the same 802.11 protocol and framework for communication

between a client and an access point. In most protocols, after completion of the 802.1X

authentication process, the client receives a key that it uses for data encryption. See How

802.1X authentication works for more information. With 802.1X authentication, an

authentication method is used between the client and a server (for example a Remote

Authentication Dial-In User Service (RADIUS) server) connected to the access point. The

authentication process uses credentials, such as a user's password, that are not transmitted

over the wireless network. Most 802.1X types support dynamic per-user, per-session keys to

strengthen the key security. The 802.1X authentication benefits from the use of an existing

authentication protocol known as the Extensible Authentication Protocol (EAP).

The 802.1X authentication for wireless networks has three main components:

● The authenticator (the access point)

● The supplicant (the client software)

● The authentication server

The 802.1X authentication security initiates an authorization request from the wireless client

to the access point, which authenticates the client to an Extensible Authentication Protocol

(EAP) compliant RADIUS server. This RADIUS server may authenticate either the user (via

passwords or certificates) or the system (by MAC address). In theory, the wireless client is

not allowed to join the networks until the transaction is complete. (Not all authentication

methods use a RADIUS server. WPA-Personal and WPA2-Personal use a common password

that must be entered at the access point and at all devices requesting access to the

network.)

There are several authentication algorithms used with 802.1X. Some examples are: EAP-

TLS, EAP-TTLS, Protected EAP (PEAP), and EAP Cisco Wireless Light Extensible

Authentication Protocol (LEAP). These are all methods for the wireless client to identify itself

to the RADIUS server. With RADIUS authentication, user identities are checked against

databases. RADIUS constitutes a set of standards that addresses Authentication,

Authorization, and Accounting (AAA). RADIUS includes a proxy process to validate clients in

a multi-server environment. The IEEE 802.1X standard provides a mechanism for controlling

1 2 ... 67 68 69 70 71 72 73 74 75 76 77 ... 284 285

Brak uwag

Advanced Wireless Communications MINI PRO Podręcznik Użytkownika Strona 72