The RADIUS server sends the list of authenticated users and groups to the WLAN controller as part of a 4-Way Handshake prior to user authentication.

The WLAN controller polls the RADIUS server for a complete list of authenticated users and groups after each user authentication.

The RADIUS server sends a group name return list attribute to the WLAN controller during every successful user authentication.

The RADIUS server forwards the request for a group attribute to an LDAP database service, and LDAP sends the group attribute to the WLAN controller.

PeerKey (PK)

Group Master Key (GMK)

Key Confirmation Key (KCK)

Pairwise Master Key (PMK)

Phase Shift Key (PSK)

Group Temporal Key (GTK)

802.1X/ EAPauthentication

Group Key Handshake

DHCP Discovery

RADIUS shared secret lookup

4-Way Handshake

Passphrase-to-PSK mapping