ZyXEL Communications G210H WPA(2) with RADIUS Application Example

Appendix C Wireless Security

Figure 56 WPA-PSK Authentication

WPA(2) with RADIUS Application Example

To set up WPA(2), you need the IP address of the RADIUS server, its port number (default is 1812), and the RADIUS shared secret. A WPA(2) application example with an external RADIUS server looks as follows. "A" is the RADIUS server. "DS" is the distribution system.

1The AP passes the wireless client's authentication request to the RADIUS server.

2The RADIUS server then checks the user's identification against its database and grants or denies network access accordingly.

3A 256-bit Pairwise Master Key (PMK) is derived from the authentication process by the RADIUS server and the client.

4The RADIUS server distributes the PMK to the AP. The AP then sets up a key hierarchy and management system, using the PMK to dynamically generate unique data encryption keys. The keys are used to encrypt every data packet that is wirelessly communicated between the AP and the wireless clients.

Figure 57 WPA(2) with RADIUS Application Example

	75
G-210H User’s Guide