Glossary 617

EAPoL EAP over LAN. An encapsulated form of the Extensible Authentication Protocol (EAP), defined in the IEEE 802.1X standard, that allows EAP messages to be carried directly by a LAN media access control (MAC) service between a wireless client (or supplicant) and an authenticator. EAPoL is also known as EAP over Wireless (EAPoW). See also EAP.

EAP over LAN See EAPoL.

EAP over Wireless See EAPoL.

EAPoW See EAPoL.

EAP-TLSExtensible Authentication Protocol with Transport Layer Security. An EAP subprotocol for 802.1X authentication. EAP-TLS supports mutual authentication and uses digital certificates to fulfill the mutual challenge. When a user (client) requests access, the authentication server responds with a server certificate. The client replies with its own certificate and also validates the server certificate. From the certificate values, the EAP-TLS algorithm can derive session encryption keys. After validating the client certification, the authentication server sends the session encryption keys for a particular session to the client. Compare PEAP.

EAP type A specific Extensible Authentication Protocol (EAP) authentication mechanism. Both the wireless client (or supplicant) and the authenticator must support the same EAP type for successful authentication to occur. EAP types supported in a Nortel WLAN 2300 System wireless LAN (WLAN) include EAP-MD5, EAP-TLS, PEAP-TLS, PEAP-MS-CHAP, and Tunneled Transport Layer Security (TTLS). See also MD5; MS-CHAP-V2; PEAP; TLS; TTLS.

EAP with Transport Layer Security See EAP-TLS.

enabled access Permission to use all WLAN 2300 System Software (WSS Software) command-line interface (CLI) commands required for configuration and troubleshooting. Enabled access requires a separate enable password. Compare restricted access.

encryption Any procedure used in cryptography to translate data into a form that can be read by only its intended receiver. An encrypted signal must be decrypted to be read. See also cryptography.

ESS Extended service set. A logical connection of multiple basic service sets (BSSs) connected to the same network. Roaming within an ESS is guaranteed by the Nortel WLAN 2300 System.

Ethernet II The original Ethernet specification produced by Digital, Intel, and Xerox (DIX) that served as the basis of the IEEE 802.3 standard.

ETSI European Telecommunications Standards Institute. A nonprofit organization that establishes telecommunications and radio standards for Europe.

European Telecommunications Standards Institute See ETSI.

extended service set See ESS.

Extensible Authentication Protocol See EAP.

Extensible Markup Language See XML.

Nortel WLAN Security Switch 2300 Series Configuration Guide

Page 617
Image 617
Nortel Networks 2300 manual EAP with Transport Layer Security See EAP-TLS