Zebra ML-1499-LAK1-01R Datasheet download pdf (Page 22)

AP-5131 Access Point Product Reference Guide

1-6

in RFC 1510), to authenticate users/clients in a wireless network environment and to securely

distribute the encryption keys used for both encrypting and decrypting.

A basic understanding of RFC 1510 Kerberos Network Authentication Service (V5) is helpful in

understanding how Kerberos functions. By default, WLAN devices operate in an open system network

where any wireless device can associate with an AP without authorization. Kerberos requires device

authentication before access to the wired network is permitted. For additional information on

configuring Kerbeors, see Configuring Kerberos Authentication on page 6-9.

1.1.8.2 EAP Authentication

The Extensible Authentication Protocol (EAP) feature provides access points and their associated

MU’s an additional measure of security for data transmitted over the wireless network. Using EAP,

authentication between devices is achieved through the exchange and verification of certificates.

EAP can be used in mixed mode security with Kerberos and WEP.

EAP is a mutual authentication method whereby both the MU and AP are required to prove their

identities. Like Kerberos, the user loses device authentication if the server cannot provide proof of

device identification

Using EAP, a user requests connection to a WLAN through the AP-5131. The AP-5131 then requests

the identity of the user and transmits that identity to an authentication server. The server prompts the

AP for proof of identity (supplied to the AP-5131 by the user) and then transmits the user data back

to the server to complete the authentication.

An MU is not able to access the network if not authenticated. When configured for EAP support, the

access point displays the MU as an EAP station.

EAP is only supported on mobile devices running Windows XP, Windows 2000 (using Service Pack #4)

and Windows Mobile 2003. Refer to the system administrator for information on configuring a

RADIUS Server for EAP (802.1x) support. For additional information on configuring EAP, see

Configuring 802.1x EAP Authentication on page 6-11.

1.1.8.3 WEP Encryption

All WLAN devices face possible information theft. Theft occurs when an unauthorized user

eavesdrops to obtain information illegally. The absence of a physical connection makes wireless links

particularly vulnerable to this form of theft. Most forms of WLAN security rely on encryption to

various extents. Encryption entails scrambling and coding information, typically with mathematical

formulas called algorithms, before the information is transmitted. An algorithm is a set of instructions

1 2 ... 17 18 19 20 21 22 23 24 25 26 27 ... 455 456

No comments

Zebra ML-1499-LAK1-01R Datasheet Page 22