A
PPENDIX
B
B-3
Authentication
Authentication starts when a radio LAN station connects to the access point.
When the station connects, the access point issues a request to start authentica-
tion for that station. Although the station that has received the request starts the
authentication procedure, the access point transfers all messages related to the
authentication to the RADIUS server. That is, the authentication itself is performed
between the station and RADIUS server.
While the authentication procedure is performed, the station cannot join the
network.
When the station passes the authentication, the RADIUS server reports to the
access point.
The access point will then allow the station to join the network.
The following shows the authentication procedure (successful example).
Authentication procedure (successful example)
RADIUS
STA
AP
4
3
5
2
1
6
1. The station connects to the access point.
2. A request to start authentication is sent from the access point to the station.
3.
The authentication procedure is performed between the station and RADIUS
server.
4. The RADIUS server reports to the access point that the station has passed
the authentication.
5. The access point reports to the station that the station has passed the
authentication.
Appendix B