ZyXEL Communications VMG3925-B10A User Manual page 282

Figure 170 WPA(2) with RADIUS Application Example
WPA(2)-PSK Application Example
A WPA(2)-PSK application looks as follows.
First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must
1
consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and
symbols).
The AP checks each wireless client's password and allows it to join the network only if the password
2
matches.
The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not
3
sent over the network, but is derived from the PSK and the SSID.
The AP and wireless clients use the TKIP or AES encryption process, the PMK and information
4
exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data
exchanged between them.
Figure 171 WPA(2)-PSK Authentication
Appendix B Wireless LANs
VMG3925-B10A User's Guide
282