Industry Leading Data Security; Kerberos Authentication - Motorola AP-51 Series Product Reference Manual

1.2.8 Industry Leading Data Security

The access point supports numerous encryption and authentication techniques to protect the data
transmitting on the WLAN.
The following authentication techniques are supported:
•

Kerberos Authentication

• EAP Authentication
The following encryption techniques are supported:
• WEP Encryption
• KeyGuard Encryption
• Wi-Fi Protected Access (WPA) Using TKIP Encryption
• WPA2-CCMP (802.11i) Encryption
In addition, the access point supports the following additional security features:
• Firewall Security
• VPN Tunnels
• Content Filtering
For an overview on the encryption and authentication schemes available, refer to
Point Security on page
1.2.8.1 Kerberos Authentication
Authentication is a means of verifying information transmitted from a secure source. If information is
authentic, you know who created it and you know it has not been altered in any way since originated.
Authentication entails a network administrator employing a software "supplicant" on their computer
or wireless device.
Authentication is critical for the security of any wireless LAN device. Traditional authentication
methods are not suitable for use in wireless networks where an unauthorized user can monitor
network traffic and intercept passwords. The use of strong authentication methods that do not
disclose passwords is necessary. The access point uses the Kerberos authentication service protocol
(specified in RFC 1510) to authenticate users/clients in a wireless network environment and to
securely distribute the encryption keys used for both encrypting and decrypting.
A basic understanding of RFC 1510 Kerberos Network Authentication Service (V5) is helpful in
understanding how Kerberos functions. By default, WLAN devices operate in an open system network
6-1.
Introduction 1-11
Configuring Access