ZyXEL G-170S User Guide - Page 31

Authentication Type

Get ZyXEL G-170S PDF manuals and user guides View all ZyXEL G-170S manuals
Add to My Manuals
Save this manual to your list of manuals

Page 31 highlights

ZyXEL G-170S User's Guide 2.2.5 WPA(2) with RADIUS Application Example You need the IP address of the RADIUS server, its port number (default is 1812), and the RADIUS shared secret. A WPA(2)-RADIUS application example with an external RADIUS server looks as follows. "A" is the RADIUS server. "DS" is the distribution system. 1 The AP passes the wireless client's authentication request to the RADIUS server. 2 The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly. 3 The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the pair-wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients. Figure 11 WPA(2) with RADIUS Application Example 2.3 Authentication Type The IEEE 802.11b/g standard describes a simple authentication method between the wireless stations and AP. Three authentication types are defined: Auto Switch, an Open system mode and a Shared key mode. • Open system mode is implemented for ease-of-use and when security is not an issue. The wireless station and the AP do not share a secret key. Thus the wireless stations can associate with any AP and listen to any data transmitted plaintext. • Shared key mode involves a shared secret key to authenticate the wireless station to the AP. This requires you to enable the wireless LAN security and use same settings on both the wireless station and the AP. • Auto Switch authentication mode allows the G-170S to switch between the open system and shared key modes automatically. Use the auto mode if you do not know the authentication mode of the other wireless stations. Chapter 2 Wireless LAN Network 31

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
ZyXEL G-170S User’s Guide
Chapter 2 Wireless LAN Network
31
2.2.5
WPA(2) with RADIUS Application Example
You need the IP address of the RADIUS server, its port number (default is 1812), and the
RADIUS shared secret. A WPA(2)-RADIUS application example with an external RADIUS
server looks as follows. "A" is the RADIUS server. "DS" is the distribution system.
1
The AP passes the wireless client's authentication request to the RADIUS server.
2
The RADIUS server then checks the user's identification against its database and grants
or denies network access accordingly.
3
The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then
sets up a key hierarchy and management system, using the pair-wise key to dynamically
generate unique data encryption keys to encrypt every data packet that is wirelessly
communicated between the AP and the wireless clients.
Figure 11
WPA(2) with RADIUS Application Example
2.3
Authentication Type
The IEEE 802.11b/g standard describes a simple authentication method between the wireless
stations and AP. Three authentication types are defined:
Auto Switch
, an
Open
system mode
and a
Shared
key mode.
•
Open
system
mode is implemented for ease-of-use and when security is not an issue.
The wireless station and the AP do
not
share a secret key. Thus the wireless stations can
associate with any AP and listen to any data transmitted plaintext.
•
Shared
key
mode involves a shared secret key to authenticate the wireless station to the
AP. This requires you to enable the wireless LAN security and use same settings on both
the wireless station and the AP.
•
Auto Switch
authentication mode allows the G-170S to switch between the open system
and shared key modes automatically. Use the auto mode if you do not know the
authentication mode of the other wireless stations.