|
Size: 1013
Comment:
|
Size: 1182
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 7: | Line 7: |
| * http://searchnetworking.techtarget.com/generic/0,295582,sid7_gci1174059,00.html * http://searchnetworking.techtarget.com/tip/0,289483,sid7_gci1245043_mem1,00.html |
Wifi
- New encryption WPA2 uses AES encryption
http://searchnetworking.techtarget.com/generic/0,295582,sid7_gci1174059,00.html
http://searchnetworking.techtarget.com/tip/0,289483,sid7_gci1245043_mem1,00.html
- WPA-PSK : Pre-shared key, fixed key on ap and clients.
- WPA-Enterprise : Users authenticated against central server e.g. AD + Radius
- EAP - Extensible Authentication Protocol, used to pass messages between un-authenticated client and the radius server
- PEAP - Protected-EAP - Encrypted over the air to AP, passes Microsoft CHAPv2 messages to server and back to authenticate.
Certificate on Server, and Public key of CertAuth on Client used to authenticate SERVER before sending username and password
- PEAP - Protected-EAP - Encrypted over the air to AP, passes Microsoft CHAPv2 messages to server and back to authenticate.
- EAP - Extensible Authentication Protocol, used to pass messages between un-authenticated client and the radius server
Radius Attributes
[006] |
Service-Type |
Framed |
|
[064] |
Tunnel-Type |
[VLAN=#] |
|
[065] |
Tunnel-Medium-Type |
[802] |
RFC 2868, section 3.2 Tunnel-Medium-Type |
[081] |
Tunnel-Private-Group-ID |
[25] |
- Allow AAA Override.
...