Security
4-100 Avaya Wireless AP-3 User’s Guide
Figure 4-12. RADIUS Authentication Illustrated
The AP acts as a pass-through device to facilitate communications
between the client PC and the RADIUS server. The AP (2) and the client
(1) exchange 802.1x messages using an EAPOL (EAP Over LAN)
protocol (A). Messages sent from the client station are encapsulated by
the AP and transmitted to the RADIUS (3) server using EAP extensions
(B).
Upon receiving a reply EAP packet from the RADIUS, the message is
typically forwarded to the client, after translating it back to the EAPOL
format. Negotiations take place between the client and the RADIUS
server. After the client has been successfully authenticated, the client
receives an Encryption Key from the AP (if the EAP type supports
automatic key distribution). The client uses this key to encrypt data after it
has been authenticated.