802.1X
802.1X is an IEEE standard for EAP encapsulation over wired or wireless Ethernet.
802.1X is also known as EAPoL (EAP over LAN). This only makes sense when you recall that EAP was originally designed for use over PPP.
802.1X Roles
802.1X defines three roles:
| Name | Description |
|---|---|
| Supplicant | User or client requesting authentication |
| Authentication Server | The server providing authentication |
| Authenticator | The device which the Supplicant requests access to, and which requests access from the Authentication Server. |
802.1X and RSN
802.1X is particularly well suited for wireless LAN applications because it requires very little processing power on the part of the Authenticator. In wireless LAN applications, the Authenticator is the Wireless Access Point (WAP).
The 802.11i RSN (Robust Security Network) protocol uses 802.1X to authenticate wireless devices to the network and to provide the dynamic keys it requires.
|
|
- 802.11i
802.11i is a draft IEEE standard for 802.11 wireless network security. 802.11i defines several new standards, and also relies heavily on many existing standards. New Protocols in 802.11i 802.11i introduced the RSN (Robust Secure Network) protocol for establishing secure communications. 802.11i also introduced the WRAP (Wireless Robust Authentication Protocol) and CCMP encryption protocols. WRAP and [...]...
- RSN (Robust Secure Network)
RSN (Robust Secure Network) is a protocol for establishing secure communications over an 802.11 wireless network. RSN (Robust Secure Network) is part of the 802.11i standard. The RSN Protocol Process The RSN protocol functions as follows: The wireless NIC sends a Probe Request. The wireless access point sends a Probe Response with an RSN Information [...]...
- WPA (Wi-Fi Protected Access)
WPA (Wi-Fi Protected Access) is an interim standard by the WiFi Alliance to comply with the security protocol designed for wireless security. WPA will most likely be rolled into an eventual IEEE 802.11i standard. This protocol was an outcome of numerous severe flaws researchers had discovered in the preceding wireless security system called Wired Equivalent [...]...
- Rogue Wireless Access Point
A Rogue Access Point is a Wi-Fi Access Point which is setup by an attacker for the purpose of sniffing wireless network traffic. 802.11 (Wi-Fi) utilizes SSIDs (Service Set IDentifiers) to authenticate NICs to wireless access points. There is no similar protocol for authenticating wireless access points. It is possible to place a rogue wireless [...]...
- How Internet Authentication Service (IAS) works
Internet Authentication Service (IAS) is Microsoft's implementation of a RADIUS (Remote Authentication Dial-in User Service) server and proxy. As a RADIUS server, IAS performs centralized connection authentication, authorization, and accounting for many types of network access, including wireless and VPN (Virtual Private Network) connections. As a RADIUS proxy, IAS forwards authentication and accounting messages to [...]...