ZyXEL Communications NBG6503 User Manual page 223

Figure 139 WPA(2) with RADIUS Application Example
WPA(2)-PSK Application Example
A WPA(2)-PSK application looks as follows.
First enter identical passwords into the AP and all wireless clients. The Pre-Shared Key (PSK) must
1
consist of between 8 and 63 ASCII characters or 64 hexadecimal characters (including spaces and
symbols).
The AP checks each wireless client's password and allows it to join the network only if the password
2
matches.
The AP and wireless clients generate a common PMK (Pairwise Master Key). The key itself is not
3
sent over the network, but is derived from the PSK and the SSID.
The AP and wireless clients use the TKIP or AES encryption process, the PMK and information
4
exchanged in a handshake to create temporal encryption keys. They use these keys to encrypt data
exchanged between them.
Appendix D Wireless LANs
NBG6503 User's Guide
223