ZyXEL Communications ZyWALL 2 Series User Manual

Page of 614
ZyWALL 2 Series User’s Guide 
Wireless LAN Screens 
7-9 
 
Figure 7-5 EAP Authentication  
The details below provide a general description of how IEEE 802.1x EAP authentication works. For an 
example list of EAP-MD5 authentication steps, see the IEEE 802.1x chapter in the Appendices.  
•  The wireless station sends a “start” message to the ZyWALL.  
•  The ZyWALL sends a “request identity” message to the wireless station for identity information. 
•  The wireless station replies with identity information, including username and password.  
•  The RADIUS server checks the user information against its user profile database and determines 
whether or not to authenticate the wireless station. 
7.7  Local User Database 
By storing user profiles locally on the ZyWALL, your ZyWALL is able to authenticate wireless users 
without interacting with a network RADIUS server. However, there is a limit on the number of users you 
may authenticate in this way. 
7.8  Configuring 802.1X  
To change your ZyWALL’s Authentication settings, click WIRELESS LAN, then the 802.1X tab. The 
screen appears as shown.