Differences between revisions 1 and 2
Revision 1 as of 2010-07-09 05:28:46
Size: 913
Editor: PieterSmit
Comment:
Revision 2 as of 2010-07-09 05:29:47
Size: 957
Editor: PieterSmit
Comment:
Deletions are marked like this. Additions are marked like this.
Line 16: Line 16:
|| [065] || Tunnel-Medium-Type || [802=] || || [065] || Tunnel-Medium-Type || [802=] || RFC 2868, section 3.2 Tunnel-Medium-Type ||

Wifi

  • New encryption WPA2 uses AES encryption
    1. WPA-PSK : Pre-shared key, fixed key on ap and clients.
    2. WPA-Enterprise : Users authenticated against central server e.g. AD + Radius
      • EAP - Extensible Authentication Protocol, used to pass messages between un-authenticated client and the radius server
        1. PEAP - Protected-EAP - Encrypted over the air to AP, passes Microsoft CHAPv2 messages to server and back to authenticate.
          • Certificate on Server, and Public key of CertAuth on Client used to authenticate SERVER before sending username and password

Radius Attributes

[064]

Tunnel-Type

[VLAN=]

[065]

Tunnel-Medium-Type

[802=]

RFC 2868, section 3.2 Tunnel-Medium-Type

[081]

Tunnel-Private-Group-ID

[25 ]

  • Allow AAA Override.

...

cisco/WiFi (last edited 2017-11-05 10:05:06 by PieterSmit)