Nokia A032 User Manual page 149

In the Nokia A032 implementation, the
sequence of events is as follows:
1 The access point receives an authenticate
request from a wireless client.
2 The access point formulates a RADIUS
request using the wireless client's identifier
(usually the MAC address) as the username
and a fixed string (called the dummy
password) for the password field. Consistent
with normal RADIUS operation, the
password is encrypted using a shared secret.
3 The RADIUS server decrypts the password
value using the appropriate shared secret
and then looks up the username in its
database.
4 If the username is not found, the server
replies with a reject message. If the
username is found the server checks that the
value of dummy password is correct and
then replies with an accept message,
containing the WEP key.
5 The access point now uses the WEP key to
challenge the wireless client and make a
decision whether to admit it to the network.
143