32
6. Glossary
802.1X:
The 802.1X standard is designed to enhance the security of wireless local
area networks (WLANs) that follow the IEEE 802.11 standard. 802.1X
provides an authentication framework for wireless LANs, allowing a user to
be authenticated by a central authority.
AES:
Short
for
A
dvanced
E
ncryption
S
tandard, a symmetric 128-bit block data
encryption technique developed by Belgian cryptographers Joan Daemen
and Vincent Rijmen.
CHAP:
Challenge Handshake Authentication Protocol. Security feature supported on
lines using PPP encapsulation that prevents unauthorized access. CHAP does
not itself prevent unauthorized access, but merely identifies the remote end.
The router or access server then determines whether that user is allowed
access.
EAP:
Extensible Authentication Protocol. Framework that supports multiple,
optional authentication mechanisms for PPP, includes clear text passwords,
challenge-response, and arbitrary dialog sequences.
LEAP:
Lightweight Extensible Authentication Protocol is a Cisco proprietary
EAP-Type. It is designed to overcome some basic wireless authentication
concerns through
Mutual Authentication
and the use of dynamic
WEP
keys.
MD5: MD5
is an EAP-Type for authentication. It is analogous to the PPP CHAP
protocol. A challenge string is sent from the
Authentication Server
to the
Supplicant
in the MD5-Challenge Request. The challenge string with the
user password is hashed using MD5 and the hash is returned in the
MD5-Challenge Response. The Authentication Server performs the same
hash and compares the result with that returned by the Supplicant to
determine whether the authentication is a Success.
