![ZyXEL Communications NWA-1100 Скачать руководство пользователя страница 164](http://html.mh-extra.com/html/zyxel-communications/nwa-1100/nwa-1100_user-manual_945911164.webp)
Appendix E Wireless LANs
ZyXEL NWA-1100 User’s Guide
164
• Access-Challenge
Sent by a RADIUS server requesting more information in order to allow access.
The access point sends a proper response from the user and then sends another
Access-Request message.
The following types of RADIUS messages are exchanged between the access point
and the RADIUS server for user accounting:
• Accounting-Request
Sent by the access point requesting accounting.
• Accounting-Response
Sent by the RADIUS server to indicate that it has started or stopped accounting.
In order to ensure network security, the access point and the RADIUS server use a
shared secret key, which is a password, they both know. The key is not sent over
the network. In addition to the shared key, password information exchanged is
also encrypted to protect the network from unauthorized access.
Types of EAP Authentication
This section discusses some popular authentication types: EAP-MD5, EAP-TLS,
EAP-TTLS, PEAP and LEAP. Your wireless LAN device may not support all
authentication types.
EAP (Extensible Authentication Protocol) is an authentication protocol that runs on
top of the IEEE 802.1x transport mechanism in order to support multiple types of
user authentication. By using EAP to interact with an EAP-compatible RADIUS
server, an access point helps a wireless station and a RADIUS server perform
authentication.
The type of authentication you use depends on the RADIUS server and an
intermediary AP(s) that supports IEEE 802.1x. .
For EAP-TLS authentication type, you must first have a wired connection to the
network and obtain the certificate(s) from a certificate authority (CA). A certificate
(also called digital IDs) can be used to authenticate users and a CA issues
certificates and guarantees the identity of each certificate owner.
EAP-MD5 (Message-Digest Algorithm 5)
MD5 authentication is the simplest one-way authentication method. The
authentication server sends a challenge to the wireless client. The wireless client
‘proves’ that it knows the password by encrypting the password with the challenge
and sends back the information. Password is not sent in plain text.
Содержание NWA-1100
Страница 2: ......
Страница 8: ...Safety Warnings ZyXEL NWA 1100 User s Guide 8 ...
Страница 10: ...Contents Overview ZyXEL NWA 1100 User s Guide 10 ...
Страница 16: ...Table of Contents ZyXEL NWA 1100 User s Guide 16 ...
Страница 18: ...18 ...
Страница 32: ...Chapter 2 Introducing the Web Configurator ZyXEL NWA 1100 User s Guide 32 ...
Страница 46: ...46 ...
Страница 54: ...Chapter 5 System Screens ZyXEL NWA 1100 User s Guide 54 ...
Страница 72: ...Chapter 6 Wireless Settings Screen ZyXEL NWA 1100 User s Guide 72 ...
Страница 92: ...Chapter 8 RADIUS Screen ZyXEL NWA 1100 User s Guide 92 ...
Страница 96: ...Chapter 9 MAC Filter Screen ZyXEL NWA 1100 User s Guide 96 ...
Страница 100: ...Chapter 10 IP Screen ZyXEL NWA 1100 User s Guide 100 ...
Страница 136: ...Chapter 15 Troubleshooting ZyXEL NWA 1100 User s Guide 136 ...
Страница 138: ...138 ...
Страница 142: ...Appendix B Power over Ethernet PoE Specifications ZyXEL NWA 1100 User s Guide 142 ...
Страница 144: ...Appendix C Power Adaptor Specifications ZyXEL NWA 1100 User s Guide 144 ...
Страница 198: ...Appendix H Text File Based Auto Configuration ZyXEL NWA 1100 User s Guide 198 ...
Страница 214: ...Appendix J Open Software Announcements ZyWALL USG 300 User s Guide 214 ...
Страница 225: ...Index ZyXEL NWA 1100 User s Guide 225 ...