ZyWALL 10~100 Series Internet Security Gateway

•Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server.

•Support for EAP (Extensible Authentication Protocol, RFC 2486) that allows additional authentication methods to be deployed with no changes to the access point or the wireless clients.

RADIUS Server Authentication Sequence

The following figure depicts a typical wireless network with a remote RADIUS server for user authentication using EAPOL (EAP Over LAN).

Client computer access authorized.

Client computer access not authorized.

Diagram 5-1 Sequences for EAP MD5–Challenge Authentication

5-2

Wireless LAN with IEEE 802.1x