This document describes how to setup strong cryptographic authentication between XSupplicant and FreeRADIUS. This is accomplished using part of 802.1x authentication for wireless network. In particular it uses EAP/TLS extension, and TLS handshake.
The solution presented here is the first open source implementation of 802.1x.
The good news is that all radiusd and xsupplicant patches towards their interoperatibility have been integrated into respective sources, so grabbing current cvs version is enough. No need to apply any patches. However, those stuff are highly experimental so additional software is required and extra steps in setup are needed so read on :-)

• HOWTO on EAP/TLS authentication between FreeRADIUS and XSupplicant, Adam Sulmicki, University of Maryland, mars 2003

• Länkar om UWB

"Someone had set up an 802.11b access point near enough to be able to receive communications from wireless clients inside the building. Posing as an official access point on the corporate wireless LAN, this decoy could accept traffic that revealed key data, network names and media access control (MAC) addresses. In other words, a wealth of corporate information that, if passed onto a wireless laptop and a set of freeware tools, could let an outsider access resources on the wired LAN. "

• Network World Fusion: Wireless LAN attacks grow in sophistication

Broadly speaking, wireless LAN security has two major issues. Authentication of network users is not strong, so unauthorized users may be able to access network resources. Traffic encryption is also weak, so attackers are able to recover transmissions.

• O'Reillynet: A Technical Comparison of TTLS and PEAP

Envision a wireless LAN with:

• Nearly limitless range.
• Two or more times the throughput of today's wireless LANs.
• The smarts to match bandwidth to applications.
• Bulletproof security.

This might not be as far off as you think, if even a fraction of the wireless technologies being cooked up make their way into products and services.

• NWfusion.com: Stretching Wireless LANs to the limit

"Wireless LAN is a complementary service offering for mobile operators. The Ericsson Mobile Operator WLAN solution combines the wide-area benefits of second- and third-generation mobile systems, including unlimited roaming and mobility, with additional throughput and capacity in indoor hot-spots via wireless LANs. The solution gives broadband mobile public access to the Internet and to corporate intranets from relatively little additional investment. The authors present WLAN as a complement to GPRS and UMTS and explain the market drivers of the solution. They describe the Ericsson Mobile Operator WLAN – Release 1 in detail and give an overview of ongoing standardization.

• Ericsson Mobile Operator WLAN solution (Ericsson Review, nr 1 2002)

Cisco har publicerat en rad on-line seminarier på sin Svenska webb, varav ett handlar om trådlösa LAN eller WLAN. Bra för nybörjare som vill få en multimediaintroduktion!

• Cisco E-Seminarier

Lars Aronsson, som driver nätverket Elektrosmog, har i dagarna börjat bygga upp en öppen databas med information och köpråd för WLAN-utrustning. Lars använder WIKI-sajten Susning.nu för att bygga upp tipsdatabasen. Wiki är en programvara som möjliggör för alla läsare att lägga till sina erfarenheter och sina tips om utrustningar. Lägg gärna in dina egna erfarenheter på Susning.nu!

• Köpråd för instickskort till trådlösa nät
• Köpråd för basstationer till trådlösa nät