main in the nìmiddle attacks

[admin_2]

Hi,

I have a question about the 802.1x and EAP architecture. My question is

relative to the mutual authentication. Some EAP-Type support mutual

authentication between a client and the server, but I read also that

this mutual authentication eliminates main in the middle attacks:

"Rogue Access Points. The problem of wireless clients being tricked by

unauthorized access points is eliminated by the use of two-way mutual

authentication. Mutual authentication enables a wireless client to know

that it is communicating with an authorized access point and not to an

imposter attempting to collect information to break into a network."

How the client authenticates the Access Point, during the authentication

phase?

Your help will be appreciated

[tcloyd]

If I am not mistaken I think you can use a VPN solution, or have a Radius (AAA)server, or both. I do know that Cisco uses LEAP for one of its mutual authentication WLAN solutions. You would need to implement a Cisco Secure ACS. If this does not help reference the article below.

http://www.networkcomputing.com/1303/1303ws22.html