xneakers wrote

>
>===== Maaf Pak, saya tidak bisa akses ke link yang Anda kasih... butuh 
>username/pass untuk download pdf-nya (atau mungkin saya yang salah 
>klik link?)... 
>

wah maah, saya lupa kalau gak semua orang bukan member IEEE :(
Kalau begitu, ini mungkin lebih mengenakkan : 
http://en.wikipedia.org/wiki/802.1x

>saya hanya liat itu related dengan port access control 
>dan saya kurang "ngeh" kaitannya dengan wireless maupun statemen saya 
>sebelumnya...
>  
>

Original question kan menanyakan bagaiamana melakukan pembatasan akses 
yang ada di level data link menggunakan user authentification.
Nah 802.1x dan EAP ini menyediakan fasilitas tersebut.
EAP sendiri nantinya diadopsi untuk WPA dan WPA2, tapi ada banyak AP pre 
WPA(2) yang sudah mempunyai implementasi authentification 
username/password sederhana built in, seperti SMC 7004WFW yang saya 
pakai. Nah selain menggunakan kombinasi username/password yang disimpan 
di dalam AP unit tersendiri, bisa juga memakai external RADIUS server.

Kutipan dari URI di atas mungkin bisa memberikan sedikit gambaran :

*IEEE 802.1X* is an IEEE <http://en.wikipedia.org/wiki/IEEE> standard 
<http://en.wikipedia.org/wiki/Standardization> for port-based Network 
Admission Control 
<http://en.wikipedia.org/wiki/Network_Admission_Control>, part of the 
IEEE 802 <http://en.wikipedia.org/wiki/IEEE_802> (802.1 
<http://en.wikipedia.org/wiki/802.1>) group of protocols. It provides 
authentication <http://en.wikipedia.org/wiki/Authentication> to devices 
attached to a LAN <http://en.wikipedia.org/wiki/Local_area_network> 
port, establishing a point-to-point connection or preventing access from 
that port if authentication fails. It is used for certain closed 
wireless access points <http://en.wikipedia.org/wiki/Access_point>, and 
is based on the EAP 
<http://en.wikipedia.org/wiki/Extensible_Authentication_Protocol>, 
Extensible Authentication Protocol (RFC 2284 
<http://www.ietf.org/rfc/rfc2284.txt>). RFC 2284 
<http://www.ietf.org/rfc/rfc2284.txt> has been obsoleted by RFC 3748 
<http://www.ietf.org/rfc/rfc3748.txt>.

802.1X is available on certain network switches 
<http://en.wikipedia.org/wiki/Network_switch>, and can be configured to 
authenticate hosts which are equipped with supplicant software, denying 
unauthorized access to the network at the data link layer.

Semoga mencerahkan.


Send instant messages to your online friends http://asia.messenger.yahoo.com 


-- 
www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia 
Info, Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] 
:: Hapus bagian yang tidak perlu (footer, dst) saat reply! :: 
## Jobs: itcenter.or.id/jobs ## Bursa: itcenter.or.id/bursa ##
$$ Iklan/promosi : www.itcenter.or.id/sponsorship $$

[@@] Jaket ITCENTER tersedia di http://shop.itcenter.or.id 

 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/ITCENTER/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 


Kirim email ke