NETGEAR WGR614 v6 manual WPA/WPA2 Overview

Reference Manual for the 54 Mbps Wireless Router WGR614 v6

WPA/WPA2 Authentication: Enterprise-level User 

Authentication via 802.1x/EAP and RADIUS

Wireless LAN

Wired Network with Optional 802.1x Port Based Network Access Control

W P A /W P A 2	W P A /W P A 2
e n a b led	e n a b led
wirele ss	A ccess P oin t
clie n t with	u sin g
“su p p lica n t”	p re -sh a re d ke y
	or 8 02 . 1 x
Figure 4-3: WPA/WPA2 Overview

T C P /I P

P orts C losed U n til

A u th en tica ted

T C P /I P

P orts O p e n ed A fter

A u th en tica ted

RADIUS Server

Login

Authentication

e rtifica te

Au th ority (for

exa m p le W in S erver, V eriS ign )

IEEE 802.1x offers an effective framework for authenticating and controlling user traffic to a protected network, as well as providing a vehicle for dynamically varying data encryption keys via EAP from a RADIUS server, for example. This framework enables using a central authentication server, which employs mutual authentication so that a rogue wireless user does not join the network.

It is important to note that 802.1x does not provide the actual authentication mechanisms. When using 802.1x, the EAP type, such as Transport Layer Security (EAP-TLS), or EAP Tunneled Transport Layer Security (EAP-TTLS), defines how the authentication takes place.

Note: For environments with a Remote Authentication Dial-In User Service (RADIUS) infrastructure, WPA supports Extensible Authentication Protocol (EAP). For environments without a RADIUS infrastructure, WPA supports the use of a pre-shared key.

Together, these technologies provide a framework for strong user authentication.

Windows XP implements 802.1x natively, and several NETGEAR switch and wireless access point products support 802.1x.

D -1 2 W ireless N etworkin g B a sics

202-10099-01, April 2005