Avaya Wireless AP-3 User Manual

Page of 425
Security
4-100                                                                                  Avaya Wireless AP-3 User’s Guide
Figure 4-12. RADIUS Authentication Illustrated
The AP acts as a pass-through device to facilitate communications 
between the client PC and the RADIUS server. The AP (2) and the client 
(1) exchange 802.1x messages using an EAPOL (EAP Over LAN) 
protocol (A). Messages sent from the client station are encapsulated by 
the AP and transmitted to the RADIUS (3) server using EAP extensions 
(B).
Upon receiving a reply EAP packet from the RADIUS, the message is 
typically forwarded to the client, after translating it back to the EAPOL 
format. Negotiations take place between the client and the RADIUS 
server. After the client has been successfully authenticated, the client 
receives an Encryption Key from the AP (if the EAP type supports 
automatic key distribution). The client uses this key to encrypt data after it 
has been authenticated.