ZyXEL Communications 10~100 Series 40

ZyWALL 10~100 Series Internet Security Gateway

•Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user profile and accounting management on a network RADIUS server.

•Support for EAP (Extensible Authentication Protocol, RFC 2486) that allows additional authentication methods to be deployed with no changes to the access point or the wireless clients.

RADIUS Server Authentication Sequence

The following figure depicts a typical wireless network with a remote RADIUS server for user authentication using EAPOL (EAP Over LAN).

Client computer access authorized.

Client computer access not authorized.

Diagram 5-1 Sequences for EAP MD5–Challenge Authentication

5-2	Wireless LAN with IEEE 802.1x

Contents

Internet Security Gateway Copyright Copyright © 2003 by ZyXEL Communications Corporation Disclaimer Trademarks Notice Certifications Information for Canadian Users Caution Note ZyXEL Limited Warranty NOTE Customer Support Table of Contents Page List of Diagrams List of Charts Page Preface About Your ZyWALL About This User's Manual Related Documentation Syntax Conventions Page Page Page Setting up Your Computer’s IP Address Windows 95/98/Me Page Page Windows 2000/NT/XP Page Page Page Macintosh OS 8/9 Page Macintosh OS Page Page Triangle Route The Ideal Setup The “Triangle Route” Problem The “Triangle Route” Solutions IP Aliasing Gateways on the WAN Side Page The Big Picture Page Wireless LAN and IEEE Benefits of a Wireless LAN Ad-hocWireless LAN Configuration Infrastructure Wireless LAN Configuration Page Wireless LAN With IEEE Security Flaws with IEEE Deployment Issues with IEEE Advantages of the IEEE Page PPPoE PPPoE in Action Benefits of PPPoE Traditional Dial-upScenario How PPPoE Works ZyWALL as a PPPoE Client PPTP What is PPTP How can we transport PPP frames from a PC to a broadband modem over Ethernet PPTP and the ZyWALL PPTP Protocol Overview Control & PPP connections PPP Data Connection Page IP Subnetting IP Addressing IP Classes Subnet Masks Subnetting Example: Two Subnets Page Example: Four Subnets Example Eight Subnets Subnetting With Class A and Class B Networks Page Page Page Command Interpreter Command Syntax Command Usage Page Firewall Commands Page Page Page Page Page Page Page NetBIOS Filter Commands Introduction Display NetBIOS Filter Settings Page NetBIOS Filter Configuration Page Boot Commands Page Log Descriptions Page Page Page Page Page Page Page Page Page VPN/IPSec logs VPN Responder IPSec Log Page Page Page Page Log Commands Log Command Example Brute-ForcePassword Guessing Protection Page Page Page Index