Types Of Radius Messages; Eap Authentication Overview - ZyXEL Communications VANTAGE CNM User Manual

RADIUS user is a simple package exchange in which the ZyXEL device acts as a message
relay between the wireless client and the network RADIUS server.

6.6.2.1 Types of RADIUS Messages

The following types of RADIUS messages are exchanged between the access point and the
RADIUS server for user authentication:
• Access-Request
• Access-Reject
• Access-Accept
• Access-Challenge
The following types of RADIUS messages are exchanged between the access point and the
RADIUS server for user accounting:
• Accounting-Request
• Accounting-Response
In order to ensure network security, the ZyXEL device and the RADIUS server use a shared
secret key, which is a password, they both know. The key is not sent over the network. In
addition to the shared key, password information exchanged is also encrypted to protect the
network from unauthorized access.

6.6.3 EAP Authentication Overview

EAP (Extensible Authentication Protocol) is an authentication protocol that runs on top of the
IEEE802.1x transport mechanism in order to support multiple types of user authentication. By
using EAP to interact with an EAP-compatible RADIUS server, the access point helps a
wireless station and a RADIUS server perform authentication.
The type of authentication you use depends on the RADIUS server or the AP. The ZyXEL
device supports EAP-TLS and EAP-TTLS with RADIUS.
Chapter 6 Configuration > WLAN
Keeps track of the client's network activity.
Sent by the ZyXEL device requesting authentication.
Sent by a RADIUS server rejecting access.
Sent by a RADIUS server allowing access.
Sent by a RADIUS server requesting more information in order to allow
access. The access point sends a proper response from the user and then
sends another Access-Request message.
Sent by the ZyXEL device requesting accounting.
Sent by the RADIUS server to indicate that it has started or stopped
accounting.
Vantage CNM User's Guide
96