30 likes | 128 Views
Wireless LAN Security Framework. Backend AAA Infrastructure RADIUS, TACACS+, LDAP, Kerberos. VPN. MD5. TLS. LEAP. TTLS. PEAP. EAP API. EAP. NDIS API. PPP. 802.1x. 802.3. 802.5. 802.11. IEEE 802.1X authentication. Performs authentication in a layer above the IEEE 802.11 MAC layer
E N D
Wireless LAN Security Framework Backend AAA Infrastructure RADIUS, TACACS+, LDAP, Kerberos VPN MD5 TLS LEAP TTLS PEAP EAP API EAP NDIS API PPP 802.1x 802.3 802.5 802.11
IEEE 802.1X authentication • Performs authentication in a layer above the IEEE 802.11 MAC layer • Removes all authentication processing from the IEEE 802.11 MAC • 802.1X can use any EAP method installed on the client and AAA server • Methods in common use include TLS, Cisco LEAP (based on MS-CHAPv1), and Funk's Tunneled TTLS (TTLS)
Common EAP Methods • EAP-TLS • TLS handshake is used to mutually authenticate a client and server • EAP-TTLS extends this • Uses the secure connection established by the TLS handshake to perform additional authentication • PEAP • Similar to EAP-TTLS but only allows EAP for authentication • Also has key exchange, session resumption, fragmentation and reassembly