Infrastructure Requirements Of 802.1x

By Author: Jasmine
Total Articles: 286
Comment this article

Using 802.Ix to improve the security of an MCSE 2003 exams network is not a trivial task. Extensive infrastructure changes for the wired and wireless network might be necessary. Some of these changes are upgrades or replacements of wireless hardware and software. In addi?tion, if they are not already part of the network infrastructure, RADIUS and possibly public key infrastructure (PKI) will need to be added to the wired network. The following sections describe the infrastructure requirements of 802. Ix in detail.

IAS on Windows Server 2003 and Windows 2000 Server can be configured to be used as the RADIUS server in the wireless network. The wireless access point becomes the RADIUS client. Wireless clients connect to the AP, but authentication and authorization is performed by IAS via Active Directory. IAS blocks or accepts connections from the AP based on two types of 70-291 policies: remote access policies and connection request policies. These policies are described below:
IAS remote access policies are used to constrain client ...
... access and manage connections. The NAS-Port-Type Matches "Wireless - Other Or Wireless-IEEE 802.11" policy (as shown in Figure 12-5) can be used to identify incoming requests from wireless clients. Additional remote access policies (for example, Windows groups, authentication EAP method, and so forth) can also be used, as described in Chapter 11.
Using the NAS-Port-Type wireless remote access policy to identify wireless clients
Two profile attributes must be set on the NAS-Port-Type wireless remote access policy to ensure smooth functioning:
Ignore-Users-Dial-in should be set to True to ensure settings such as Call Back are not sent to wireless APs.
Termination-Action should be set to RADIUS Request, as shown in MCSE 2003 certification, to ensure that when XP clients re-authenticate, wireless APs don't disconnect them.