Authentication Frames

     While Authentication frames are not officially classified as a Request or a Response frame, this two frame exchange is key to how client devices gain access to the network. Open system authentication is the process of the two stations confirming who they are. Open system authentication should always be successful. The Authentication Request is sent from the client station to the AP. From there the AP sends an Authentication Response back to the client. Since these are unicast frames, each are followed by an ACK from the receiving station.


Simplified view of the frame exchange:




The authentication frame format looks like the following:


If you were to view it inside of a packet capture:

Authentication Request from Client:


Authentication Response from AP:


    You can see in the authentication response that the sequence number is 2 and that the status code is successful in both the authentication request and the response. Also note that the type field as a management and the subtype as authentication.


Comments

Post a Comment

Popular posts from this blog

Following Design Processes

    It is important to use proper design methodology when designing wireless networks. WiFi has evolved numerous times since it was first implemented, yet I still see very outdated or flat out wrong ways of designing a wireless network. The biggest thing I find is that many places do not follow the design process when choosing to install a new or update an existing WLAN. Essentially we are throwing hardware at a design problem and expecting it to work. In this post, I'll cover the proper way to design a wireless network according to CWNP's guidance. Thank you CWDP-303 official study guide from CWNP for providing me with the ability to do so!  Define     This might be one of the most overlooked parts of the design process. This step in the process sets the foundation for a good, well thought out design. Instead of simply getting a floor plan and jumping straight into a network planner, let's understand who or what we are designing for. During this stage, meeting ...
Read more

ExtremeCloud IQ Instant Port

Image
Instant Port enables you to automate your access layer by dynamically assigning VLANs based on the end devices MAC and/or LLDP capabilities. This document will cover the configuration of instant port and show an example.   Configuration of Instant Port is simple. First, create an Instant Port Profile within your network policy then assign that profile to your Switch Template.   ·          The Non-Forwarding VLAN will be used by default to learn the MAC and LLDP capabilities of the end device. ·          The Default Port Type will be used if you wish to provide non-matching devices layer two connectivity. ·          You can choose whether to allow non-matching devices to use either the Default Port Type or the Non-Forwarding VLAN. By using the Non-Forwarding VLAN, unknown devices will be dropped in an unused VLAN without the ability to reach other ...
Read more