380Managing Keys and Certificates

Wireless Security through TLS

In the case of wireless or wired authentication 802.1X users whose authentication is performed by the WSS switch, the first stage of any EAP transaction is Transport Layer Security (TLS) authentication and encryption. WLAN Manage- ment Software and Web View also require a session to the WSS that is authenticated and encrypted by TLS. Once a TLS session is authenticated, it is encrypted.

TLS allows the client to authenticate the WSS (and optionally allows the WSS to authenticate the client) through the use of digital signatures. Digital signatures require a public-private key pair. The signature is created with a private key and verified with a public key. TLS enables secure key exchange.

320657-A

Page 380
Image 380
Nortel Networks 2300 manual Wireless Security through TLS