Wireless Access Points Authentication and Association Methods

Two Step Process Authentication Association

The A & A Process “I’d like to authenticate”

The A & A Process “I’d like to authenticate” “Authentication granted”

The A & A Process “I’d like to authenticate” “Authentication granted” “I’d like to associate”

The A & A Process “I’d like to authenticate” “Authentication granted” “I’d like to associate” “Association granted”

Authentication Methods Open System Shared Key 802.1x and EAP Now, let’s look at each of these...

Open System Authentication “I’d like to authenticate” “Authentication granted” Also called “null authentication.” Authentication is granted to every request. No challenge is issued. Can be used with or without encryption (encryption, if used, will be applied during association).

Shared Key Authentication “I’d like to authenticate” Station and WAP both have the shared key

Shared Key Authentication “I’d like to authenticate” “Encrypt this: ‘abcd123’” WAP sends the challenge

Shared Key Authentication “I’d like to authenticate” “Encrypt this: ‘abcd123’” “Here it is: ‘yg48cr%w’” Station response: encrypts the challenge with the shared key

Shared Key Authentication “I’d like to authenticate” “Encrypt this: ‘abcd123’” “Here it is: yg48cr%w” “Authentication granted” WAP decrypts the response and, if correct, authenticates the Station

Shared Key Authentication “I’d like to authenticate” “Encrypt this: ‘abcd123’” “Here it is: yg48cr%w” “Authentication granted” “I’d like to associate”

Shared Key Authentication “I’d like to authenticate” “Encrypt this: ‘abcd123’” “Here it is: yg48cr%w” “Authentication granted” “I’d like to associate” “Association granted”

802.1x and EAP Authentication Auth. Request RADIUS Server EAP Identity Request EAP Identity Response EAP Identity Response RADIUS Access Challenge RADIUS Access Challenge RADIUS Challenge Response RADIUS Challenge Response EAP Success Response EAP Success Response “I’d like to associate.” “Association granted.”

This is the end.