ZyWALL 2 Series User’s Guide

Figure 7-5 EAP Authentication

The details below provide a general description of how IEEE 802.1x EAP authentication works. For an example list of EAP-MD5 authentication steps, see the IEEE 802.1x chapter in the Appendices.

•The wireless station sends a “start” message to the ZyWALL.

•The ZyWALL sends a “request identity” message to the wireless station for identity information.

•The wireless station replies with identity information, including username and password.

•The RADIUS server checks the user information against its user profile database and determines whether or not to authenticate the wireless station.

7.7Local User Database

By storing user profiles locally on the ZyWALL, your ZyWALL is able to authenticate wireless users without interacting with a network RADIUS server. However, there is a limit on the number of users you may authenticate in this way.

7.8Configuring 802.1X

To change your ZyWALL’s Authentication settings, click WIRELESS LAN, then the 802.1X tab. The screen appears as shown.

Wireless LAN Screens

7-9