<x:xmpmeta tsc:version="2.0.1" xmlns:x="adobe:ns:meta/" xmlns:tsc="http://www.techsmith.com/xmp/tsc/">
   <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpDM="http://ns.adobe.com/xmp/1.0/DynamicMedia/" xmlns:xmpG="http://ns.adobe.com/xap/1.0/g/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:tscDM="http://www.techsmith.com/xmp/tscDM/" xmlns:tscIQ="http://www.techsmith.com/xmp/tscIQ/" xmlns:tscHS="http://www.techsmith.com/xmp/tscHS/" xmlns:stDim="http://ns.adobe.com/xap/1.0/sType/Dimensions#" xmlns:stFnt="http://ns.adobe.com/xap/1.0/sType/Font#" xmlns:exif="http://ns.adobe.com/exif/1.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
      <rdf:Description dc:date="2017-03-27 11:54:57 PM" dc:source="Camtasia,9.0.1,enu" dc:title="l_16nac1" tscDM:firstFrame="l_16nac1_First_Frame.png" tscDM:originId="2625EA67-814F-4A0C-B4C7-2902396CFF3B" tscDM:project="l_16nac1.tscproj">
         <xmpDM:duration xmpDM:scale="1/1000" xmpDM:value="1869466"/>
         <xmpDM:videoFrameSize stDim:unit="pixel" stDim:h="1080" stDim:w="1440"/>
         <tsc:langName>
            <rdf:Bag>
               <rdf:li xml:lang="en-US">English</rdf:li></rdf:Bag>
         </tsc:langName>
         <xmpDM:Tracks>
            <rdf:Bag>
               <rdf:li>
                  <rdf:Description xmpDM:trackType="ScreenText" xmpDM:frameRate="f1000" xmpDM:trackName="Screen Text">
                     <xmpDM:markers>
                        <rdf:Seq>
                           <rdf:li><rdf:Description xmpDM:name="Network Access Control and Cloud Security Raj Jain Washington University in Saint Louis Saint Louis, MO 63130 Jain@wustl.edu" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse571-17/" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="cloudsecurity" xmpDM:startTime="0" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Overview Network Access Control (NAC) RADIUS Extensible Authentication Protocol (EAP) EAP over LAN (EAPOL) 802.1X" xmpDM:startTime="19000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Cloud Security These slides are based partly on Lawrie Brown’s slides supplied with William Stallings’s book “Cryptography and Network Security:" xmpDM:startTime="19000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Principles and Practice,” 7th Ed, 2017." xmpDM:startTime="19000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="19000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Network Access Control (NAC) AAA: Authentication: Is the user legit? Authorization: What is he allowed to do? Accounting: Keep track" xmpDM:startTime="33700" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="of usage Components: Supplicant: User Authenticator: Network edge device Authentication Server: Remote Access Server (RAS) or Policy Server Backend policy" xmpDM:startTime="33700" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="and access control AP Supplicant Authenticator Authentication Server ras" xmpDM:startTime="33700" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Network Access Enforcement Methods IEEE 802.1X" xmpDM:startTime="265167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="used in Ethernet, WiFi Firewall DHCP Management VPN VLANs" xmpDM:startTime="265167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="RADIUS Remote Authentication Dial-In User Service Central point for Authorization, Accounting, and Auditing data Þ AAA server Network Access servers" xmpDM:startTime="369667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="get authentication info from RADIUS servers Allows RADIUS Proxy Servers Þ ISP roaming alliances Uses UDP: In case of server" xmpDM:startTime="369667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="failure, the request must be re-sent to backup Þ Application level retransmission required TCP takes too long to indicate failure" xmpDM:startTime="369667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Proxy RADIUS RADIUS Network Access Server Remote Access Server User ISP Net Customer Network Ref: http://en.wikipedia.org/wiki/RADIUS" xmpDM:startTime="369667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="369667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Extensible Authentication Protocol (EAP) Old Methods: Password Authentication Protocol (PAP), Challenge Handshake Authentication Protocol (CHAP), Microsoft CHAP (MS-CHAP) Each authentication" xmpDM:startTime="647033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="protocols required a new protocol  Extensible Authentication Protocol Allows using many different authentication methods Single-Step Protocol Þ Only one" xmpDM:startTime="647033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="packet in flight Þ Duplicate elimination and retransmission Ack/Nack  Can run over lossy link No fragmentation." xmpDM:startTime="647033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Individual authentication methods can deal with fragmentation." xmpDM:startTime="647033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="One frag/round trip Þ Many round trips Allows using a backend authentication server Þ Authenticator does not have to know" xmpDM:startTime="647033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="all the authentication methods Can run on any link layer (PPP, 802, ...)." xmpDM:startTime="647033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Does not require IP." xmpDM:startTime="647033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="RFC 3748, “EAP,” June 2004." xmpDM:startTime="647033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Ref: http://en.wikipedia.org/wiki/Extensible_Authentication_Protocol" xmpDM:startTime="647033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="647033" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="RADIUS Remote Authentication Dial-In User Service Central point for Authorization, Accounting, and Auditing data Þ AAA server Network Access servers" xmpDM:startTime="648967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="get authentication info from RADIUS servers Allows RADIUS Proxy Servers Þ ISP roaming alliances Uses UDP: In case of server" xmpDM:startTime="648967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="failure, the request must be re-sent to backup Þ Application level retransmission required TCP takes too long to indicate failure" xmpDM:startTime="648967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Proxy RADIUS RADIUS Network Access Server Remote Access Server User ISP Net Customer Network Ref: http://en.wikipedia.org/wiki/RADIUS" xmpDM:startTime="648967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="648967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Extensible Authentication Protocol (EAP) Old Methods: Password Authentication Protocol (PAP), Challenge Handshake Authentication Protocol (CHAP), Microsoft CHAP (MS-CHAP) Each authentication" xmpDM:startTime="674233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="protocols required a new protocol  Extensible Authentication Protocol Allows using many different authentication methods Single-Step Protocol Þ Only one" xmpDM:startTime="674233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="packet in flight Þ Duplicate elimination and retransmission Ack/Nack  Can run over lossy link No fragmentation." xmpDM:startTime="674233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Individual authentication methods can deal with fragmentation." xmpDM:startTime="674233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="One frag/round trip Þ Many round trips Allows using a backend authentication server Þ Authenticator does not have to know" xmpDM:startTime="674233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="all the authentication methods Can run on any link layer (PPP, 802, ...)." xmpDM:startTime="674233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Does not require IP." xmpDM:startTime="674233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="RFC 3748, “EAP,” June 2004." xmpDM:startTime="674233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Ref: http://en.wikipedia.org/wiki/Extensible_Authentication_Protocol" xmpDM:startTime="674233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="674233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP (Cont) eap" xmpDM:startTime="862000" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Terminology Peer: Entity to be authenticated = Supplicant Authenticator: Authenticating entity at network boundary Authentication Server: Has authentication database" xmpDM:startTime="918200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP server = Authenticator if there is no backend Authentication Server otherwise authentication server Master Session Key (MSK) = Keying" xmpDM:startTime="918200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="material agreed by the peer and the EAP server." xmpDM:startTime="918200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="At least 64b." xmpDM:startTime="918200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Generally given by the server to authenticator." xmpDM:startTime="918200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="AP Peer Authenticator Authentication Server" xmpDM:startTime="918200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Exchange EAP Message Format: Identifier is incremented for each message." xmpDM:startTime="981933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Identifier in response is set equal to that in request." xmpDM:startTime="981933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Type field in the request/response indicates the authentication." xmpDM:startTime="981933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Assigned by Internet Assigned Number Authority (IANA) AP Supplicant Authenticator Request (01) Response (02) Success (03) Failure (04) Only four" xmpDM:startTime="981933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="message codes: Code Identifier Length [Type] 8b 8b 16b Data 8b" xmpDM:startTime="981933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types 1 = Identity 2 = Notification (messages to be displayed to user) 3 = Nack 4 = MD5" xmpDM:startTime="1123133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Challenge (CHAP) 5 = One time password 6 = Generic Token card (GTC) 254 = Expanded types (allows vendor specific" xmpDM:startTime="1123133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="options) 255 = Experimental Notification requests are responded by notification responses." xmpDM:startTime="1123133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Nack type is valid only for responses." xmpDM:startTime="1123133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded types include a 3B vendor ID and 4B vendor msg type." xmpDM:startTime="1123133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded Nack is used in response to requests of type 254 and may include alternative suggestions for methods." xmpDM:startTime="1123133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1123133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Exchange EAP Message Format: Identifier is incremented for each message." xmpDM:startTime="1131500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Identifier in response is set equal to that in request." xmpDM:startTime="1131500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Type field in the request/response indicates the authentication." xmpDM:startTime="1131500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Assigned by Internet Assigned Number Authority (IANA) AP Supplicant Authenticator Request (01) Response (02) Success (03) Failure (04) Only four" xmpDM:startTime="1131500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="message codes: Code Identifier Length [Type] 8b 8b 16b Data 8b" xmpDM:startTime="1131500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types 1 = Identity 2 = Notification (messages to be displayed to user) 3 = Nack 4 = MD5" xmpDM:startTime="1144067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Challenge (CHAP) 5 = One time password 6 = Generic Token card (GTC) 254 = Expanded types (allows vendor specific" xmpDM:startTime="1144067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="options) 255 = Experimental Notification requests are responded by notification responses." xmpDM:startTime="1144067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Nack type is valid only for responses." xmpDM:startTime="1144067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded types include a 3B vendor ID and 4B vendor msg type." xmpDM:startTime="1144067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded Nack is used in response to requests of type 254 and may include alternative suggestions for methods." xmpDM:startTime="1144067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1144067" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Multiplexing Model EAP Layer demultiplexes using code." xmpDM:startTime="1151933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Code 1 (request), 3 (success), and 4 (failure) are delivered to the peer layer Code 2 (response) is delivered to" xmpDM:startTime="1151933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="the EAP authenticator layer." xmpDM:startTime="1151933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Both ends may need to implement peer layer and authenticator layer for mutual authentication Lower layer may be unreliable but" xmpDM:startTime="1151933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="it must provide error detection (CRC) Lower layer should provide MTU of 1020B or greater EAP Method X EAP Peer" xmpDM:startTime="1151933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Layer EAP Layer Lower Layer Peer Authenticator EAP Method Y EAP Method X EAP Auth." xmpDM:startTime="1151933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Layer EAP Layer Lower Layer EAP Method Y Ref: RFC 3748" xmpDM:startTime="1151933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types 1 = Identity 2 = Notification (messages to be displayed to user) 3 = Nack 4 = MD5" xmpDM:startTime="1153500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Challenge (CHAP) 5 = One time password 6 = Generic Token card (GTC) 254 = Expanded types (allows vendor specific" xmpDM:startTime="1153500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="options) 255 = Experimental Notification requests are responded by notification responses." xmpDM:startTime="1153500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Nack type is valid only for responses." xmpDM:startTime="1153500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded types include a 3B vendor ID and 4B vendor msg type." xmpDM:startTime="1153500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded Nack is used in response to requests of type 254 and may include alternative suggestions for methods." xmpDM:startTime="1153500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1153500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Exchange EAP Message Format: Identifier is incremented for each message." xmpDM:startTime="1154267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Identifier in response is set equal to that in request." xmpDM:startTime="1154267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Type field in the request/response indicates the authentication." xmpDM:startTime="1154267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Assigned by Internet Assigned Number Authority (IANA) AP Supplicant Authenticator Request (01) Response (02) Success (03) Failure (04) Only four" xmpDM:startTime="1154267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="message codes: Code Identifier Length [Type] 8b 8b 16b Data 8b" xmpDM:startTime="1154267" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types 1 = Identity 2 = Notification (messages to be displayed to user) 3 = Nack 4 = MD5" xmpDM:startTime="1155867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Challenge (CHAP) 5 = One time password 6 = Generic Token card (GTC) 254 = Expanded types (allows vendor specific" xmpDM:startTime="1155867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="options) 255 = Experimental Notification requests are responded by notification responses." xmpDM:startTime="1155867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Nack type is valid only for responses." xmpDM:startTime="1155867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded types include a 3B vendor ID and 4B vendor msg type." xmpDM:startTime="1155867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded Nack is used in response to requests of type 254 and may include alternative suggestions for methods." xmpDM:startTime="1155867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1155867" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Multiplexing Model EAP Layer demultiplexes using code." xmpDM:startTime="1277233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Code 1 (request), 3 (success), and 4 (failure) are delivered to the peer layer Code 2 (response) is delivered to" xmpDM:startTime="1277233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="the EAP authenticator layer." xmpDM:startTime="1277233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Both ends may need to implement peer layer and authenticator layer for mutual authentication Lower layer may be unreliable but" xmpDM:startTime="1277233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="it must provide error detection (CRC) Lower layer should provide MTU of 1020B or greater EAP Method X EAP Peer" xmpDM:startTime="1277233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Layer EAP Layer Lower Layer Peer Authenticator EAP Method Y EAP Method X EAP Auth." xmpDM:startTime="1277233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Layer EAP Layer Lower Layer EAP Method Y Ref: RFC 3748" xmpDM:startTime="1277233" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Pass through Authenticator EAP Peer/Auth layers demultiplex using “type” field." xmpDM:startTime="1280300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Method X EAP Layer Lower Layer Peer Authentication Server EAP Peer EAP Layer Lower Layer EAP Layer AAA/IP EAP" xmpDM:startTime="1280300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Method X EAP Layer AAA/IP Pass-thru Authenticator EAP Auth EAP Auth EAP Peer EAP Auth" xmpDM:startTime="1280300" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Upper Layer Protocols Lightweight EAP (LEAP): Uses MS-CHAP." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Not secure." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-TLS: Transport Level Security." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Both sides need certificates EAP-TTLS: Tunneled TLS." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Only server certificates." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Secure tunnel for peer." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-FAST: Flexible Authentication via Secure Tunneling." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Certificates optional." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Protected tunnels." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Protected EAP (PEAP): Server Certificates." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Client password." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PEAPv1 or EAP-GTC: Generic Token Cards." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Client uses secure tokens." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-SIM: Subscriber Identity Module used in GSM." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="64b keys." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-AKA: Authentication and Key Agreement." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Used in 3G." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="128b keys." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-PSK: Pre-shared key+AES-128 to generate keys EAP-IKEv2: Internet Key Exchange." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Mutual authentication." xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Certificate, Password, or Shared secret Ref: http://en.wikipedia.org/wiki/Protected_Extensible_Authentication_Protocol" xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1281500" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP over LAN (EAPOL) EAP was designed for Point-to-point line IEEE extended it for LANs  EAPOL Added a few" xmpDM:startTime="1283567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="more messages and fields Five types of EAPOL messages: EAPOL Start: Sent to a multicast address EAPOL Key: Contains encryption" xmpDM:startTime="1283567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="and other keys sent by the authenticator to supplicant EAPOL packet: Contains EAP message (Request, Response, Success, Failure) EAPOL Logoff:" xmpDM:startTime="1283567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Disconnect EAPOL Encapsulated-ASF-Alert: Management alert Message Format: Version=1, Type=start, key, …, Ethernet Header Version Type Packet Body Len Packet Body" xmpDM:startTime="1283567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Ref: http://en.wikipedia.org/wiki/Eapol" xmpDM:startTime="1283567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1283567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAPOL (Cont) eapol" xmpDM:startTime="1285133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP over LAN (EAPOL) EAP was designed for Point-to-point line IEEE extended it for LANs  EAPOL Added a few" xmpDM:startTime="1285633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="more messages and fields Five types of EAPOL messages: EAPOL Start: Sent to a multicast address EAPOL Key: Contains encryption" xmpDM:startTime="1285633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="and other keys sent by the authenticator to supplicant EAPOL packet: Contains EAP message (Request, Response, Success, Failure) EAPOL Logoff:" xmpDM:startTime="1285633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Disconnect EAPOL Encapsulated-ASF-Alert: Management alert Message Format: Version=1, Type=start, key, …, Ethernet Header Version Type Packet Body Len Packet Body" xmpDM:startTime="1285633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Ref: http://en.wikipedia.org/wiki/Eapol" xmpDM:startTime="1285633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1285633" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Upper Layer Protocols Lightweight EAP (LEAP): Uses MS-CHAP." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Not secure." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-TLS: Transport Level Security." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Both sides need certificates EAP-TTLS: Tunneled TLS." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Only server certificates." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Secure tunnel for peer." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-FAST: Flexible Authentication via Secure Tunneling." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Certificates optional." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Protected tunnels." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Protected EAP (PEAP): Server Certificates." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Client password." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PEAPv1 or EAP-GTC: Generic Token Cards." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Client uses secure tokens." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-SIM: Subscriber Identity Module used in GSM." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="64b keys." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-AKA: Authentication and Key Agreement." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Used in 3G." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="128b keys." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-PSK: Pre-shared key+AES-128 to generate keys EAP-IKEv2: Internet Key Exchange." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Mutual authentication." xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Certificate, Password, or Shared secret Ref: http://en.wikipedia.org/wiki/Protected_Extensible_Authentication_Protocol" xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1285900" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Pass through Authenticator EAP Peer/Auth layers demultiplex using “type” field." xmpDM:startTime="1286100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Method X EAP Layer Lower Layer Peer Authentication Server EAP Peer EAP Layer Lower Layer EAP Layer AAA/IP EAP" xmpDM:startTime="1286100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Method X EAP Layer AAA/IP Pass-thru Authenticator EAP Auth EAP Auth EAP Peer EAP Auth" xmpDM:startTime="1286100" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Multiplexing Model EAP Layer demultiplexes using code." xmpDM:startTime="1286333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Code 1 (request), 3 (success), and 4 (failure) are delivered to the peer layer Code 2 (response) is delivered to" xmpDM:startTime="1286333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="the EAP authenticator layer." xmpDM:startTime="1286333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Both ends may need to implement peer layer and authenticator layer for mutual authentication Lower layer may be unreliable but" xmpDM:startTime="1286333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="it must provide error detection (CRC) Lower layer should provide MTU of 1020B or greater EAP Method X EAP Peer" xmpDM:startTime="1286333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Layer EAP Layer Lower Layer Peer Authenticator EAP Method Y EAP Method X EAP Auth." xmpDM:startTime="1286333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Layer EAP Layer Lower Layer EAP Method Y Ref: RFC 3748" xmpDM:startTime="1286333" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types 1 = Identity 2 = Notification (messages to be displayed to user) 3 = Nack 4 = MD5" xmpDM:startTime="1286767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Challenge (CHAP) 5 = One time password 6 = Generic Token card (GTC) 254 = Expanded types (allows vendor specific" xmpDM:startTime="1286767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="options) 255 = Experimental Notification requests are responded by notification responses." xmpDM:startTime="1286767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Nack type is valid only for responses." xmpDM:startTime="1286767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded types include a 3B vendor ID and 4B vendor msg type." xmpDM:startTime="1286767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded Nack is used in response to requests of type 254 and may include alternative suggestions for methods." xmpDM:startTime="1286767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1286767" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Exchange EAP Message Format: Identifier is incremented for each message." xmpDM:startTime="1287133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Identifier in response is set equal to that in request." xmpDM:startTime="1287133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Type field in the request/response indicates the authentication." xmpDM:startTime="1287133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Assigned by Internet Assigned Number Authority (IANA) AP Supplicant Authenticator Request (01) Response (02) Success (03) Failure (04) Only four" xmpDM:startTime="1287133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="message codes: Code Identifier Length [Type] 8b 8b 16b Data 8b" xmpDM:startTime="1287133" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types 1 = Identity 2 = Notification (messages to be displayed to user) 3 = Nack 4 = MD5" xmpDM:startTime="1527933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Challenge (CHAP) 5 = One time password 6 = Generic Token card (GTC) 254 = Expanded types (allows vendor specific" xmpDM:startTime="1527933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="options) 255 = Experimental Notification requests are responded by notification responses." xmpDM:startTime="1527933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Nack type is valid only for responses." xmpDM:startTime="1527933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded types include a 3B vendor ID and 4B vendor msg type." xmpDM:startTime="1527933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Expanded Nack is used in response to requests of type 254 and may include alternative suggestions for methods." xmpDM:startTime="1527933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1527933" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Multiplexing Model EAP Layer demultiplexes using code." xmpDM:startTime="1530167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Code 1 (request), 3 (success), and 4 (failure) are delivered to the peer layer Code 2 (response) is delivered to" xmpDM:startTime="1530167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="the EAP authenticator layer." xmpDM:startTime="1530167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Both ends may need to implement peer layer and authenticator layer for mutual authentication Lower layer may be unreliable but" xmpDM:startTime="1530167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="it must provide error detection (CRC) Lower layer should provide MTU of 1020B or greater EAP Method X EAP Peer" xmpDM:startTime="1530167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Layer EAP Layer Lower Layer Peer Authenticator EAP Method Y EAP Method X EAP Auth." xmpDM:startTime="1530167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Layer EAP Layer Lower Layer EAP Method Y Ref: RFC 3748" xmpDM:startTime="1530167" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Pass through Authenticator EAP Peer/Auth layers demultiplex using “type” field." xmpDM:startTime="1645200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Method X EAP Layer Lower Layer Peer Authentication Server EAP Peer EAP Layer Lower Layer EAP Layer AAA/IP EAP" xmpDM:startTime="1645200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Method X EAP Layer AAA/IP Pass-thru Authenticator EAP Auth EAP Auth EAP Peer EAP Auth" xmpDM:startTime="1645200" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Upper Layer Protocols Lightweight EAP (LEAP): Uses MS-CHAP." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Not secure." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-TLS: Transport Level Security." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Both sides need certificates EAP-TTLS: Tunneled TLS." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Only server certificates." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Secure tunnel for peer." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-FAST: Flexible Authentication via Secure Tunneling." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Certificates optional." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Protected tunnels." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Protected EAP (PEAP): Server Certificates." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Client password." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="PEAPv1 or EAP-GTC: Generic Token Cards." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Client uses secure tokens." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-SIM: Subscriber Identity Module used in GSM." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="64b keys." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-AKA: Authentication and Key Agreement." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Used in 3G." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="128b keys." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP-PSK: Pre-shared key+AES-128 to generate keys EAP-IKEv2: Internet Key Exchange." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Mutual authentication." xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Certificate, Password, or Shared secret Ref: http://en.wikipedia.org/wiki/Protected_Extensible_Authentication_Protocol" xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1708667" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP over LAN (EAPOL) EAP was designed for Point-to-point line IEEE extended it for LANs  EAPOL Added a few" xmpDM:startTime="1810600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="more messages and fields Five types of EAPOL messages: EAPOL Start: Sent to a multicast address EAPOL Key: Contains encryption" xmpDM:startTime="1810600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="and other keys sent by the authenticator to supplicant EAPOL packet: Contains EAP message (Request, Response, Success, Failure) EAPOL Logoff:" xmpDM:startTime="1810600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Disconnect EAPOL Encapsulated-ASF-Alert: Management alert Message Format: Version=1, Type=start, key, …, Ethernet Header Version Type Packet Body Len Packet Body" xmpDM:startTime="1810600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Ref: http://en.wikipedia.org/wiki/Eapol" xmpDM:startTime="1810600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1810600" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAPOL (Cont) eapol" xmpDM:startTime="1816967" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP over LAN (EAPOL) EAP was designed for Point-to-point line IEEE extended it for LANs  EAPOL Added a few" xmpDM:startTime="1817567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="more messages and fields Five types of EAPOL messages: EAPOL Start: Sent to a multicast address EAPOL Key: Contains encryption" xmpDM:startTime="1817567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="and other keys sent by the authenticator to supplicant EAPOL packet: Contains EAP message (Request, Response, Success, Failure) EAPOL Logoff:" xmpDM:startTime="1817567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Disconnect EAPOL Encapsulated-ASF-Alert: Management alert Message Format: Version=1, Type=start, key, …, Ethernet Header Version Type Packet Body Len Packet Body" xmpDM:startTime="1817567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Ref: http://en.wikipedia.org/wiki/Eapol" xmpDM:startTime="1817567" xmpDM:duration="1000"/></rdf:li><rdf:li><rdf:Description xmpDM:name="" xmpDM:startTime="1817567" xmpDM:duration="1000"/></rdf:li></rdf:Seq>
                     </xmpDM:markers>
                  </rdf:Description>
               </rdf:li>
               <rdf:li>
                  <rdf:Description xmpDM:trackType="TableOfContents" xmpDM:frameRate="f1000" xmpDM:trackName="Table of Contents">
                     <xmpDM:markers>
                        <rdf:Seq>
                           <rdf:li><rdf:Description xmpDM:name="Network Access Control  and Cloud Security" xmpDM:startTime="0" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="0" tscDM:imageoffset="0" tscDM:imagerect="0, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Overview" xmpDM:startTime="19000" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="1" tscDM:imageoffset="0" tscDM:imagerect="75, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Network Access Control (NAC)" xmpDM:startTime="33700" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="2" tscDM:imageoffset="0" tscDM:imagerect="150, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Network Access Enforcement Methods" xmpDM:startTime="265167" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="3" tscDM:imageoffset="0" tscDM:imagerect="225, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="RADIUS" xmpDM:startTime="369667" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="4" tscDM:imageoffset="0" tscDM:imagerect="300, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Extensible Authentication Protocol (EAP)" xmpDM:startTime="647033" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="5" tscDM:imageoffset="0" tscDM:imagerect="375, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="RADIUS" xmpDM:startTime="648967" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="6" tscDM:imageoffset="0" tscDM:imagerect="450, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="Extensible Authentication Protocol (EAP)" xmpDM:startTime="674233" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="7" tscDM:imageoffset="0" tscDM:imagerect="525, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP (Cont)" xmpDM:startTime="862000" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="8" tscDM:imageoffset="0" tscDM:imagerect="600, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Terminology" xmpDM:startTime="918200" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="9" tscDM:imageoffset="0" tscDM:imagerect="675, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Exchange" xmpDM:startTime="981933" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="10" tscDM:imageoffset="0" tscDM:imagerect="750, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types" xmpDM:startTime="1123133" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="11" tscDM:imageoffset="0" tscDM:imagerect="825, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Exchange" xmpDM:startTime="1131500" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="12" tscDM:imageoffset="0" tscDM:imagerect="900, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types" xmpDM:startTime="1144067" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="13" tscDM:imageoffset="0" tscDM:imagerect="975, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Multiplexing Model" xmpDM:startTime="1151933" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="14" tscDM:imageoffset="0" tscDM:imagerect="1050, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types" xmpDM:startTime="1153500" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="15" tscDM:imageoffset="0" tscDM:imagerect="1125, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Exchange" xmpDM:startTime="1154267" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="16" tscDM:imageoffset="0" tscDM:imagerect="1200, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types" xmpDM:startTime="1155867" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="17" tscDM:imageoffset="0" tscDM:imagerect="1275, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Multiplexing Model" xmpDM:startTime="1277233" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="18" tscDM:imageoffset="0" tscDM:imagerect="1350, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Pass through Authenticator" xmpDM:startTime="1280300" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="19" tscDM:imageoffset="0" tscDM:imagerect="1425, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Upper Layer Protocols" xmpDM:startTime="1281500" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="20" tscDM:imageoffset="0" tscDM:imagerect="1500, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP over LAN (EAPOL)" xmpDM:startTime="1283567" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="21" tscDM:imageoffset="0" tscDM:imagerect="1575, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAPOL (Cont)" xmpDM:startTime="1285133" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="22" tscDM:imageoffset="0" tscDM:imagerect="1650, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP over LAN (EAPOL)" xmpDM:startTime="1285633" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="23" tscDM:imageoffset="0" tscDM:imagerect="1725, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Upper Layer Protocols" xmpDM:startTime="1285900" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="24" tscDM:imageoffset="0" tscDM:imagerect="1800, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Pass through Authenticator" xmpDM:startTime="1286100" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="25" tscDM:imageoffset="0" tscDM:imagerect="1875, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Multiplexing Model" xmpDM:startTime="1286333" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="26" tscDM:imageoffset="0" tscDM:imagerect="1950, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types" xmpDM:startTime="1286767" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="27" tscDM:imageoffset="0" tscDM:imagerect="2025, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Exchange" xmpDM:startTime="1287133" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="28" tscDM:imageoffset="0" tscDM:imagerect="2100, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Types" xmpDM:startTime="1527933" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="29" tscDM:imageoffset="0" tscDM:imagerect="2175, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Multiplexing Model" xmpDM:startTime="1530167" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="30" tscDM:imageoffset="0" tscDM:imagerect="2250, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Pass through Authenticator" xmpDM:startTime="1645200" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="31" tscDM:imageoffset="0" tscDM:imagerect="2325, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP Upper Layer Protocols" xmpDM:startTime="1708667" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="32" tscDM:imageoffset="0" tscDM:imagerect="2400, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP over LAN (EAPOL)" xmpDM:startTime="1810600" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="33" tscDM:imageoffset="0" tscDM:imagerect="2475, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAPOL (Cont)" xmpDM:startTime="1816967" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="34" tscDM:imageoffset="0" tscDM:imagerect="2550, 0, 75, 56"/></rdf:li><rdf:li><rdf:Description xmpDM:name="EAP over LAN (EAPOL)" xmpDM:startTime="1817567" tscDM:image="l_16nac1_Thumbnails.png" tscDM:imageindex="35" tscDM:imageoffset="0" tscDM:imagerect="2625, 0, 75, 56"/></rdf:li></rdf:Seq>
                     </xmpDM:markers>
                  </rdf:Description>
               </rdf:li>
            </rdf:Bag>
         </xmpDM:Tracks>
         <tscDM:controller>
            <rdf:Description xmpDM:name="tscplayer">
               <tscDM:parameters>
                  <rdf:Bag>
                     <rdf:li xmpDM:name="autohide" xmpDM:value="false"/><rdf:li xmpDM:name="autoplay" xmpDM:value="true"/><rdf:li xmpDM:name="loop" xmpDM:value="false"/><rdf:li xmpDM:name="searchable" xmpDM:value="true"/><rdf:li xmpDM:name="captionsenabled" xmpDM:value="false"/><rdf:li xmpDM:name="sidebarenabled" xmpDM:value="false"/><rdf:li xmpDM:name="unicodeenabled" xmpDM:value="false"/><rdf:li xmpDM:name="backgroundcolor" xmpDM:value="000000"/><rdf:li xmpDM:name="sidebarlocation" xmpDM:value="left"/><rdf:li xmpDM:name="endaction" xmpDM:value="stop"/><rdf:li xmpDM:name="endactionparam" xmpDM:value="true"/><rdf:li xmpDM:name="locale" xmpDM:value="en-US"/></rdf:Bag>
               </tscDM:parameters>
               <tscDM:controllerText>
                  <rdf:Bag>
                  </rdf:Bag>
               </tscDM:controllerText>
            </rdf:Description>
         </tscDM:controller>
         <tscDM:contentList>
            <rdf:Description>
               <tscDM:files>
                  <rdf:Seq>
                     <rdf:li xmpDM:name="0" xmpDM:value="l_16nac1.mp4"/><rdf:li xmpDM:name="1" xmpDM:value="l_16nac1_First_Frame.png"/><rdf:li xmpDM:name="2" xmpDM:value="l_16nac1_Thumbnails.png"/></rdf:Seq>
               </tscDM:files>
            </rdf:Description>
         </tscDM:contentList>
      </rdf:Description>
   </rdf:RDF>
</x:xmpmeta>