NETGEAR FWG114Pv2 - Wireless Firewall With USB Print Server Reference Manual page 243

Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P v2
Client with a WPA-
enabled wireless
adapter and supplicant
(Win XP, Funk,
Meetinghouse)
1
Figure E-4: 802.1x Authentication Sequence
The AP sends Beacon Frames with WPA information element to the stations in the service set.
Information elements include the required authentication method (802.1x or Pre-shared key) and
the preferred cipher suite (WEP, TKIP, or AES). Probe Responses (AP to station) and Association
Requests (station to AP) also contain WPA information elements.
Initial 802.1x communications begin with an unauthenticated supplicant (client device)
1.
attempting to connect with an authenticator (802.11 access point). The client sends an
EAP-start message. This begins a series of message exchanges to authenticate the client.
The access point replies with an EAP-request identity message.
2.
Wireless Networking Basics
For example, a
WPA-enabled AP
2
6 5
7
201-10301-02, May 2005
For example, a
RADIUS server
3
4
E-13