介紹了基于RADIUS/EAP協(xié)議的IEEE 802.1x無線局域網(wǎng)的接入認證過程與結(jié)構(gòu)，針對無線局域網(wǎng)訪問控制具有的三方協(xié)作過程特點，分析了無線局域網(wǎng)的安全機制，指出了或者由于協(xié)議自身缺陷或者由于不恰當?shù)南到y(tǒng)實現(xiàn)或者由于協(xié)議惡化，均可以導(dǎo)致有無線局域網(wǎng)的6個方面的安全漏洞，指出了需充分利用RADIUS/EAP分組結(jié)構(gòu)的數(shù)據(jù)段提供加密認證并且還需設(shè)計雙門接入的認證機制。最后比較了常見的四種安全接入方案，指出了在不同程度和范圍內(nèi)具有一定的抵御各種攻擊的能力。This paper introduces the authentication and the architecture of IEEE802.1x Wireless Local Area Network based on the RADIUS/EAP, with respect to the characteristics of three parties coloration in accessing to WLAN, analyses the security mechanism, indicates that there would exist six security crushers either by the protocol defects or by the inadequate usage and deteriorating and it is necessary to fully utilize the data frame in the RADIUS/EAP structure for the encryption and authentication as well as to design the double-doors authenticated access mechanism. The four common authentication solutions are compared and the corresponding security functions in certain different extents are evaluated.