Configuration Guide Configuring WAPI
5 Configuring WAPI
5.1 Overview
WLAN Authentication and Privacy Infrastructure (WAPI) is a wireless network security standard for which China has the
proprietary intellectual property rights.
WAPI comprises two parts:
WLAN Authentication Infrastructure (WAI): a security solution used for identification and key management in a WLAN.
WAPI provides two authentication approaches: WAPI pre-shared key authentication and WAPI certificate
authentication.
WLAN Privacy Infrastructure (WPI): a security solution used for data transfer protection in a WLAN, including data
encryption, data authentication and replay prevention.
WAPI can be applied in both small- and large-scaled WLANs. The pre-shared key authentication is a simple authentication
mechanism not requiring dedicated authentication servers. However, the WAPI certificate authentication needs to use
dedicated servers and can be used to provide secure and easy-to-manage access solutions for large-scaled WLANs.
Protocols and Standards
GB 15629.11-2003/XG1-2006: Information technology - Telecommunications and information exchange between
systems - Local and metropolitan area networks - Specific requirements - Part 11: Wireless LAN Medium Access
Control (MAC) and Physical Layer (PHY) specifications Amendment 1
RFC 3280:Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
RFC 4492:Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS)
WAPI Multi-trust Certificate Implementation Technology, a technical guide for multi-certificate authentication
5.2 Applications
N/A
5.3 Features
Basic Concepts
AE
Authenticator Entity: An entity that provides authentication service for the ASUE before the ASUE accesses a service. This
entity resides in the AP or AC.
To Next Page
Loading...
Need help?
General
