CCNA 2 - Capitulo 12.7

CCNA 2 - Capitulo 12.7

1. WLAN CONCEPTs

   • WLAN SECURITY
     • AUTHENTICATING A HOME USER
       • TWO CHOICES FOR AUTHENTICATION
         • WAP
         • WPA 2
           • PERSONAL
             • HOME OR SMALL OFICE NETWORKS
             • USER AUTHENTICATE USING A PRE SHARED KEY (PSK)
           • ENTERPRISE
             • ENTEPRISE NETWORKS
             • REQUIRES AUTHENTICATION SERVER
               • REMOTE AUTHENTICATION DIAL-IN USR SERVICE (RADIUS)
                 • ADDITIONAL SECURITY
                 • NPS
                 • FREE RADIUS
                 • CISCO ISE
                 • MUST BE USE CERTIFICATES DIGITAL
             • USERS MUST AUTHENTICATE USING
               • 802.1X STANDARD WHICH USES EAP FOR AUTHENTICATION
     • AUTHENTICATION IN THE ENTERPRISE
       • 3 REQUERIMENTS
         • RADIUS SERVER
           • RADIUS SERVER IP ADDRESS
           • REACHABLE ADDRESS OF THE RADIUS SERVER
         • UDP PORT NUMBERS
           • ASSIGNED OFFICIALLY UDP PORTS
             • PORT 1812 / 1645 FOR RADIUS AUTHENTICATION
             • PORT 1813 / 1646 FOR RADIUS ACCOUTING
         • SHARED KEY
           • USED TO AUTHENTICATE THE AP WITH THE RADIUS SERVER
           • WLC OR AP , IS NOT PARAMETER CONFIGURED ON A WIRELESS CLIENT
       • USER AUTHENTICATION AND AUTHORIZATION
         • IS HANDLED BY THE 802.1X STANDARD
       • HOW DOES THE LOGIN PROCESS WORK?
         • USES EAP TO COMMUNICATE WITH THE AP AND RADIUS SERVER
       • WHATS IS EAP ?
         • IS A FRAMEWORK FOR AUTHENTICATING NETWORK ACCESS
         • IT CAN PROVIDE A SECURE AUTHENTICATION MECHANISM AND NEGOTIATE A SECURITE PRIVATE USING
           • TKIP
           • AES ENCRYPTION
     • ENCRYPTION METHODS
       • TEMPORAL KEY INTEGRITY PROTOCOL (TKIP)
         • USED BY WPA
         • SUPPORT FOR LEGACY WLAN EQUIPMENT
         • IT MAKES USE OF WEP , BUT ENCRYPTS THE LAYER 2 PAYLOAD USING TKIP AND
           • MIC ENSURE THE MESSAGE HAS NOT BEEN ALTERED
           • CARRIES OUT A MESSAGE INTEGRIT CHECK (MIC)
       • ADVANCED ENCRYPTION STANDARD (AES)
         • USED BY WPA 2
         • PREFERED METHOD
           • BECAUSE STRONGER METHOD OF ENCRYPTION
         • IT USES COUNTER CIPHER METHOD WITH CCMP
           • BLOCK CHAINING MESSAGE AUTHENTICATION CODE PROTOCOL (CCMP)
           • ALLOWS DESTINATION HOSTS RECOGNIZE THE BITS HAVE BEEN ALTERED