October 2005
Intermediate to advanced
317 pages
11h 26m
English
book
AAA and Network Security for Mobile Access: Radius, Diameter, EAP, PKI and IP Mobility
by Mahsa Nakhjiri, Madjid Nakhjiri
Content preview from AAA and Network Security for Mobile Access: Radius, Diameter, EAP, PKI and IP Mobility
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
10.4. Use of EAP in 802 Networks
We mentioned that for wireless links EAP is carried over link layer protocols such as PPP or EAPOL. IEEE 802 LANs provide their own inbuilt framing support for traffic the way PPP does for dial-up and cellular data links. The link characteristics are known in advance and network protocols and features are carried inside LAN 802 headers, so the LCP or NCP type functions of PPP are not needed either. For those reasons, authentication functionality was one of the most important features missing from 802 protocols when it came to controlling access over 802 links. This was the motivation behind the creation of 802.1X: to protect the network from unauthorized access by users trying to access Ethernet connections that were physically accessible to the public. Hence authentication and access control at the network point of presence became the main goal of 802.1X.
It should be noted that the recent popularity of 802.1X-based methods for providing security within 802.11 WLANs does not mean that 802.1X is only designed for 802.11. On the contrary, 802.1X is designed for all 802 type links. In fact, 802.1X design started before 802.11 specifications started with wired connections in mind, even though the latest version of 802.1X [8021X2004] was published yesterday (time of writing: 9:20 pm December 15, 2004) to facilitate the use of 802.1X with 802.11.
10.4.1. 802.1X Port-Based Authentication
The 802.1x model is a logical model consisting of a switched Ethernet ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.