Intel Wireless WiFi Link 4965AGN, User Manual

Page: 143 / 191

EAP-FAST
EAP-FAST like EAP-TTLS and PEAP, uses tunneling to protect traffic. The main
difference is that EAP-FAST does not use certificates to authenticate. Provisioning in
EAP-FAST is negotiated solely by the client as the first communication exchange
when EAP-FAST is requested from the server. If the client does not have a pre-
shared secret Protected Access Credential (PAC), it is able to initiate a provisioning
EAP-FAST exchange to dynamically obtain one from the server.
EAP-FAST documents two methods to deliver the PAC: manual delivery through an
out-of-band secure mechanism and automatic provisioning.
●
Manual delivery mechanisms are any delivery mechanism that the
administrator of the network feels is sufficiently secure for their network.
●
Automatic provisioning establishes an encrypted tunnel to protect the
authentication of the client and the delivery of the PAC to the client. This
mechanism, while not as secure as a manual method may be, is more secure
than the authentication method used in LEAP.
The EAP-FAST method is divided into two parts: provisioning and authentication.
The provisioning phase involves the initial delivery of the PAC to the client. This
phase only needs to be performed once per client and user.
Mixed-Cell Mode
Some access points, for example Cisco 350 or Cisco 1200, support environments in
which not all client stations support WEP encryption; this is called Mixed-Cell Mode.
When these wireless networks operate in "optional encryption" mode, client stations
that join in WEP mode, send all messages encrypted, and stations that use standard
mode, send all messages unencrypted. These access points broadcast that the
network does not use encryption, but allows clients that use WEP mode to join .
When Mixed-Cell is enabled in a profile, it allows you to connect to access points
that are configured for "optional encryption."
Radio Management
When this feature is enabled your wireless adapter provides radio management
information to the Cisco infrastructure. If the Cisco Radio Management utility is used
on the infrastructure, it configures radio parameters, detects interference and rogue
access points.
Back to Top