Appendix F:Glossary 813
Nortel WLAN—Security Switch 2300 Series Configuration Guide
EAP Extensible Authentication Protocol. A general point-to-point protocol that supports multiple
authentication mechanisms. Defined in RFC 2284, EAP has been adopted by IEEE 802.1X in an encapsulated
form for carrying authentication messages in a standard message exchange between a user (client) and an
authenticator. The encapsulated EAP, also known as EAP over LAN (EAPoL) and EAP over Wireless (EAPoW),
enables the authenticator’s server to authenticate the client with an authentication protocol agreed upon by
both parties. See also EAP type.
EAPoL EAP over LAN. An encapsulated form of the Extensible Authentication Protocol (EAP), defined in
the IEEE 802.1X standard, that allows EAP messages to be carried directly by a LAN media access control
(MAC) service between a wireless client (or supplicant) and an authenticator. EAPoL is also known as EAP
over Wireless (EAPoW). See also EAP.
EAP over LAN See EAPoL.
EAP over Wireless See EAPoL.
EAPoW See EAPoL.
EAP-TLS Extensible Authentication Protocol with Transport Layer Security. An EAP subprotocol for
802.1X authentication. EAP-TLS supports mutual authentication and uses digital certificates to fulfill the
mutual challenge. When a user (client) requests access, the authentication server responds with a server
certificate. The client replies with its own certificate and also validates the server certificate. From the
certificate values, the EAP-TLS algorithm can derive session encryption keys. After validating the client
certification, the authentication server sends the session encryption keys for a particular session to the client.
Compare PEAP.
EAP type A specific Extensible Authentication Protocol (EAP) authentication mechanism. Both the
wireless client (or supplicant) and the authenticator must support the same EAP type for successful
authentication to occur. EAP types supported in a Nortel WLAN 2300 system wireless LAN (WLAN) include
EAP-MD5, EAP-TLS, PEAP-TLS, PEAP-MS-CHAP, and Tunneled Transport Layer Security (TTLS). See
also MD5; MS-CHAP-V2; PEAP; TLS; TTLS.
EAP with Transport Layer Security See EAP-TLS.
enabled access Permission to use all WLAN Security Switch 2300 Series (WSS Software)
command-line interface (CLI) commands required for configuration and troubleshooting. Enabled access
requires a separate enable password. Compare restricted access.
encryption Any procedure used in cryptography to translate data into a form that can be read by only its
intended receiver. An encrypted signal must be decrypted to be read. See also cryptography.
ESS Extended service set. A logical connection of multiple basic service sets (BSSs) connected to the same
network. Roaming within an ESS is guaranteed by the Nortel WLAN 2300 system.
Ethernet II The original Ethernet specification produced by Digital, Intel, and Xerox (DIX) that served as
the basis of the IEEE 802.3 standard.
ETSI European Telecommunications Standards Institute. A nonprofit organization that establishes
telecommunications and radio standards for Europe.
European Telecommunications Standards Institute See ETSI.
extended service set See ESS.