Manuals / ZyXEL Communications / Computer Equipment / Network Card

ZyXEL Communications G-360, G-162 manual WPA and WPA2 with RADIUS Application Example

Models: G-162 G-360

1 72

Download 72 pages 44.09 Kb

Page 30

Figure 2-6 WPA-PSK/WPA2-PSK Authentication

ZyXEL G-162/G-360 User’s Guide

Figure 2-6 WPA-PSK/WPA2-PSK Authentication

2.2.3 WPA and WPA2 with RADIUS Application Example

You need the IP address of the RADIUS server, its port number (default is 1812), and the RADIUS shared secret. A WPA/WPA2 application example with an external RADIUS server looks as follows. “A” is the RADIUS server. “DS” is the distribution system.

Step 1. The AP passes the wireless client’s authentication request to the RADIUS server.

Step 2. The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly.

Step 3. The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then sets up a key hierarchy and management system, using the pair-wise key to dynamically generate unique data encryption keys to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.

2-20	WLAN Networking

Image 30

ZyXEL Communications G-360, G-162 manual WPA and WPA2 with RADIUS Application Example, 6 WPA-PSK/WPA2-PSK Authentication

Contents

ZyXEL G-162/G-360 ZyXEL G-162/G-360 User’s Guide802.11b/g Wireless LAN Adapter Users GuideDisclaimer CopyrightCopyright 2005 by ZyXEL Communications Corporation TrademarksZyXEL Limited Warranty Online RegistrationFCC Certification Part 15, Class BFederal Communications Commission FCC Interference Statement Customer Support 2-15 Table of Contentsviii Chapter 2 Wireless LAN NetworkingTable Of Contents ZyXEL G-162/G-360 User’s GuideSyntax Conventions PrefaceAbout This Users Guide Related DocumentationWireless Access Point Graphics Icons KeyPreface Wireless SignalPage Chapter Getting Started 1.2 ZyXEL G-162/G-360 Hardware and Utility Installation1.3 Using the ZyXEL Utility to Configure Your Network 1.1 About Your ZyXEL G-162/G-360Double-clicking on the Z icon will display the following ZyXEL utility window 1.3.1 Site Survey Connect Use Windows Zero ConfigurationConfigure Rescanshould use the same SSID whatever your choice is e. Band shows you 802.11b and 802.11g on the 2.4GHz 2.2 Enable CCX Mode refers the Cisco Compatible Extension, which is the certificate-based authentications EAP-TLS, PEAP and LEAP using dynamic keys for data encryption. Check this box will enable PEAP-MS-CHAP-V2, PEAP-GTC, TLS and LEAP. Please see your MIS administrator for these settings when you are about to enable one of these mode. Please refer to Ch4-Configuring Wireless Security for detail WEP-802.1x and WPA-802.1x authentication information. Also, please see the User Guide of Funk Odyssey software for more WPA-enterprise security settings Advanced Mode This screen Bottom Red Rectangle allows you to make changes to the default ways the card operates including advanced 802.11 settings. Unless you are an advanced user and have deep knowledge about each property on this page, it is recommended that you leave them at the default settings. For more information, please refer to section 2.3 and 1.3.2 Profile Profile Pool Active Profiles1.3.3 Link Info supporting OTIST, you must also make the same change here Table 1.2 Link InfoReceive Network Information TransmitConnection Information 1-131.3.4 About ZyXEL Website2.1 Overview Chapter Wireless LAN Networking2.1.4 Wireless Network Application 2.1.1 SSIDtype and use the same SSID and channel Infrastructure BSS Ad-Hoc IBSSFigure 2-1 IBSS Example Figure 2-2 BSS Example2.1.5 Roaming Figure 2-3 Infrastructure Network Example2.2 Wireless LAN Security Figure 2-5 Wireless LAN Security LevelsFigure 2-4 Roaming Example 2.2.1 Data Encryption with WEP 2.2.2 WPA-PSK and WPA2-PSK Application ExampleFigure 2-6 WPA-PSK/WPA2-PSK Authentication 2.2.3 WPA and WPA2 with RADIUS Application ExampleEAP Authentication 2.2.4 IEEEFigure 2-7 WPA/WPA2 with RADIUS Application Example 2.3 Fragmentation Threshold 2.4 RTS/CTS ThresholdFigure 2-8 RTS Threshold The wireless adapter must also support OTIST and have OTIST enabled 2.5 OTIST One Touch Intelligent Security Technologynegatively affect the throughput performance Page 3.1 The About Screen Chapter MaintenanceMaintenance ZyXEL G-162/G-360 User’s Guide3.2 Uninstalling the ZyXEL Utility Aboutnetwork configuration 3.3 Upgrading the ZyXEL UtilityPage Chapter Configuring Wireless Security 4.1 Configuring SecurityAP/Router, it will fail to connect the network 3. Click Configure. You will then see the screen below 4.2 Configuring WEP1. Select WEP under Security 2. Select Auto under Authentication Mode Wireless Security6. Key Format Select either Hex or ASCII to enter the WEP key 4.3 Configuring WPA-PSK 4. Enter the same pass phrase used to configure WPA-PSK on your access point 4.4 Configuring WPA2-PSK Wireless SecurityZyXEL G-162/G-360 User’s Guide Wireless Security ZyXEL G-162/G-360 User’s Guide4.5 Configuring WEP-802.1x 4.5.1 Configuring WEP-802.1x EAP-LEAP Wireless SecurityZyXEL G-162/G-360 User’s Guide Wireless Security 4-10b. Enter login name and password under the Login Name and Password ZyXEL G-162/G-360 User’s GuideWireless Security 4.5.2 Configuring WEP-802.1x EAP-PEAP-MS-CHAPv24-11 ZyXEL G-162/G-360 User’s Guide8. Select a certificate from the list, and click OK Wireless Security 4.5.3 Configuring WEP-802.1x PEAP-GTC4-13 ZyXEL G-162/G-360 User’s GuideWireless Security 4-14b. Enter login name and password under the Login Name and Password ZyXEL G-162/G-360 User’s GuideWireless Security 4.5.4 Configuring WEP-802.1x EAP-TLS4-15 ZyXEL G-162/G-360 User’s Guide4-16 Wireless SecurityZyXEL G-162/G-360 User’s Guide 4.6 Configuring WPA-802.1x 7. Select WPA under Security 8. Select LEAP under Authentication Mode 4.6.1 Configuring WPA-802.1x EAP-LEAP4-18 9. Click Configure and then you will see the screen belowWireless Security 4-19d. Enter login name and password under the Login Name and Password ZyXEL G-162/G-360 User’s Guide10. Select PEAP MS-CHAP-V2 under Authentication protocol 4.6.2 Configuring WPA-802.1x EAP-PEAP-MS-CHAPv24-20 11. Click Configure and then you will see the screen below16. Select a certificate from the list, and click OK 5. Select PEAP-GTC under Authentication Mode 4.6.3 Configuring WPA-802.1x PEAP-GTC4-22 6. Click Configure and then you will see the screen belowWireless Security 4-23b. Enter login name and password under the Login Name and Password ZyXEL G-162/G-360 User’s GuideWireless Security 4.6.4 Configuring WPA-802.1x EAP-TLS4-24 ZyXEL G-162/G-360 User’s Guide4-25 Wireless SecurityZyXEL G-162/G-360 User’s Guide Wireless Security 4.6.5 Configuring WPA2-802.1x EAP-TLS4-26 ZyXEL G-162/G-360 User’s Guide4-27 Wireless SecurityZyXEL G-162/G-360 User’s Guide Page Table 5-1 Troubleshooting Starting ZyXEL Utility Program Chapter Troubleshooting5.1 Problems Starting the ZyXEL Utility Program Troubleshooting5.4 Problems with Security Settings 5.2 Problems with LED Status5.3 Problems with the Link Status Table 5-2 Troubleshooting LED StatusTroubleshooting 5.5 Problems Communicating With Other ComputersTable 5-5 Troubleshooting Communication Problems ZyXEL G-162/G-360 User’s GuidePage EAP-MD5 Message-Digest Algorithm Appendix A Types of EAP AuthenticationEAP-TTLS Tunneled Transport Layer Service EAP-TLS Transport Layer SecurityComparison of EAP Authentication Types LEAP