• cisco
• WiFi

Wifi

• New encryption WPA2 uses AES encryption
  1. WPA-PSK : Pre-shared key, fixed key on ap and clients.
  2. WPA-Enterprise : Users authenticated against central server e.g. AD + Radius
     • EAP - Extensible Authentication Protocol, used to pass messages between un-authenticated client and the radius server
       1. PEAP - Protected-EAP - Encrypted over the air to AP, passes Microsoft CHAPv2 messages to server and back to authenticate.

          • Certificate on Server, and Public key of CertAuth on Client used to authenticate SERVER before sending username and password

Radius Attributes

• Allow AAA Override.

...