SWAN Infrastructure Authentication

The first phase of deploying a SWAN-enabled WLAN network is to enable infrastructure authentication between WDS client APs and the WDS server. The requirement for infrastructure authentication is to securely authenticate each WDS client AP (as well as each WLSE) to the WDS server and secure the communication between the WDS client APs and the WDS server. This also allows the WDS server to easily identify the authorized APs in a SWAN-enabled network.

Figure 9-3 illustrates the infrastructure authentication message exchange between WDS client APs, the WDS server, and the RADIUS server. The communication link between WLSE and the WDS server is also authenticated and authorized using infrastructure authentication. ...

Get Cisco Wireless LAN Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.