Juniper Networks Steel-Belted Radius EAP Expansion Module

Steel-Belted Radius EAP Expansion Module Overview:

The SBR EAP EM is an add-on to Juniper Networks Steel-Belted Radius Service Provider Edition (SBR SP) RADIUS/Authentication, Authorization and Accounting (AAA) server that lets operators offer secure 802.11 wireless LAN-based services to their customers. The SBR EAP EM is based on the IEEE security standard 802.1X, and supports the strong wireless LAN (WLAN) security protocols EAP-TTLS (Tunneled Transport Layer Security) and EAP-TLS (Transport Layer Security). By adding SBR EAP EM to your existing SBR SP deployment, you can offer subscribers the secure access from public venues they’ve been demanding.

Juniper Networks Steel-Belted Radius EAP Expansion Module (SBR EAP EM) enables you to target new subscribers who require secure Internet access, plus offer enterprise customers public access for their users that is as secure as their WLAN access at work. Enterprise users have the added convenience of being able to use the same client software and credentials, whether they’re connecting at work or at a hotspot.

Juniper Networks SBR SP and SBR EAP EM fully support the roaming environment you’ve already put in place. When your subscribers connect over other providers’ networks, the use of SBR EAP EM and its supported strong security protocols lets you rest assured that your customers’ names and credentials will remain private.

SBR EAP EM puts you on the cutting edge of access technology, and positions you well to tap into these lucrative new revenue opportunities.

Features & Benefits:

Strong WLAN Security

The joint SBR SP and SBR EAP EM solution provides everything you need to support secure 802.1X-based access to your network.

SBR SP enables you to provide wireless subscriber access control by authenticating users against a backend database of user credentials, granting access only to those users who are in your database or in one of your customer’s database. The WLAN security protocols supported in SBR EAP EM include EAP-TTLS, EAP-PEAP (Protected Extensible Authentication Protocol), EAP-FAST and EAP-TLS for additional layers of security to fully protect your customers’ access. These protocols offer strong security over a wireless link and across untrusted networks, fully protecting credential and data security.

Numerous Service and Deployment Options

Juniper Networks SBR SP and SBR EAP EM offer you the flexibility you need to set up hotspot access services any way you wish, ensuring that you can accommodate the requirements of all of your customers. For the subscriber relationships you manage directly, if you deploy EAP-TTLS, EAP-PEAP or EAP-FAST, you can set up user names and passwords in your SQL, LDAP, Solaris NIS, or other backend database. What’s more, when you offer existing subscribers secure WLAN access, there are no changes required to their credentials or configurations. This allows you to fully integrate your secure WLAN users with other users to whom you may be offering other types of services, such as VPN or dial up access.

If you’re deploying EAP-TLS, you can set up user certificates in any Certificate Authority, and for your enterprise customers, you can elect to authenticate subscribers against the authentication database and scheme already in place on their network. This can be accomplished via a standard proxy RADIUS request to the enterprise RADIUS server.

System Requirements:

Together with SBR SP, the SBR EAP EM runs on Solaris 9 and 10 SPARC Edition, and on Windows XP Workstation, Windows Server 2003 and Windows Vista.

SBR Series Software Comparison:

Documentation:

Download the Juniper Networks Steel-Belted Radius EAP Expansion Module Datasheet (PDF).