SLIDE 1
S 2
EAP Client-side Transport draft-boursetty-eap-cst-00.txt IETF 57 - - PowerPoint PPT Presentation
EAP Client-side Transport draft-boursetty-eap-cst-00.txt IETF 57 - - PowerPoint PPT Presentation
EAP Client-side Transport draft-boursetty-eap-cst-00.txt IETF 57 EAP WG July 2003 A typical EAP setup Access Target Client NAS Network Network AAA server S 2 A new EAP setup Authentication AuthToken AuthServer Integrity Client
SLIDE 2
SLIDE 3
S 3
A new EAP setup
AuthToken AuthServer Client Server Authentication Integrity Encryption
SLIDE 4
S 4
Why this new setup?
Purpose of this setup:
– Service separation – Interoperability
Advantages of this setup:
– Security on the client side – Flexibility on the Client side – Ease of deployment of the
authentication method
SLIDE 5
S 5
The protocol stack
Local Link EAP-CST LDA EAP-CST EAP EAP-X Local Link EAP-CST LDA EAP-CST EAP Service EAP Service EAP AAA EAP
- ver
AAA EAP AAA EAP
- ver
AAA EAP EAP-X
AuthToken Client Server AuthServer
Authentication
SLIDE 6
S 6
Why this new protocol stack?
Broaden the scope encompassed by
Authentication Tokens
Distinguish the Authentication
Token from the Local link
SLIDE 7
S 7