ZyXEL Communications P-660H-T Series User Manual

Page of 466
P-660H/HW-T Series User’ Guide
Chapter 5 Wireless LAN
78
Figure 23   WPA - PSK Authentication
5.6.2  WPA with RADIUS Application Example
You need the IP address, port number (default is 1812) and shared secret of a RADIUS server. 
A WPA application example with an external RADIUS server looks as follows. "A" is the 
RADIUS server. "DS" is the distribution system (wired link to the LAN).
The AP passes the wireless client’s authentication request to the RADIUS server.
The RADIUS server then checks the user's identification against its database and grants 
or denies network access accordingly.
The RADIUS server distributes a Pairwise Master Key (PMK) key to the AP that then 
sets up a key hierarchy and management system, using the pair-wise key to dynamically 
generate unique data encryption keys to encrypt every data packet that is wirelessly 
transmitted between the AP and the wireless clients