ZyXEL Communications G-3000H Manual de usuario descargar pdf (Pagina 85)

IEEE 802.1x Access Control

The EAPOL packet contains the following fields: protocol version, packet type, packet body length and packet body. Most of the fields are obvious. The packet

type can have four different values, and these values are described below:

● EAP-Packet : Both the supplicant and the authenticator send this packet when authentication is taking place. This is the packet that contains either the MD5-

Challenge or TLS information required for authentication.

● EAPOL-Start : This supplicant sends this packet when it wants to initiate the authentication process.

● EAPOL-Logoff : The supplicant sends this packet when it wants to terminate its 802.1x session.

● EAPOL-Key : This is used for TLS authentication method. The Wireless AP uses this packet to send the calculated WEP key to the supplicant after TLS

negotiation has completed between the supplicant and the RADIUS server.

IEEE 802.1x Configuration in ZyXEL Wireless Access Point

● Enable 802.1x in AP

When the IEEE 802.1x authentication is enabled, the wireless client must be authenticated by the ZyXEL AP before it can communicate on your network through

ZyXEL AP. By default, the 802.1x function is disabled (Authentication Control= Force Authorized) to allow all wireless client. You can use SMT or Web

Configuration to configure it.

file:///D|/work%20info/Support%20Note/ZyAIR_G3000H/app/8021x.htm (6 of 27)2005/7/15 下午 02:14:56