无线局域网安全认证的EAP策略

EAP Strategy of WLAN's Security Authentication

IEEE 802.11i协议使用基于802.1x和可扩展认证协议EAP的认证方案,但标准中并没有指定具体的EAP类型,采用何种EAP策略,直接关系到无线局域网的安全性能。介绍了802.1x和可扩展身份验证协议EAP在保障网络访问安全方面的工作原理,通过对EAP协议分析以及常用的EAP方法比较,提出了部署安全无线局域网的EAP策略;EAP-TLS是用于大型机构无线局域网解决方案的EAP类型,PEAP是用于中小型企业无线局域网解决方案的EAP类型。

The IEEE802.11 i protocol uses a way based on 802.1 x and EAP, but the standard doesn＇ t point out the EAP type and what kind of FAP strategy is adopted, which directly relates the security performance of WLAN. Begins with a description of how 802. 1x and extensible authcntication protocol work to secure access to the network, brings out the EAP strategy of developing WLAN though the analysis of EAP through comparison of eommon used EAP methods, EAP - TLS is primarily intended for large and enterprise organizations, PEAP is primarily for small and medium organizations,