介紹了基于RADIUS/EAP協議的IEEE 802.1x無線局域網的接入認證過程與結構，針對無線局域網訪問控制具有的三方協作過程特點，分析了無線局域網的安全機制，指出了或者由于協議自身缺陷或者由于不恰當的系統實現或者由于協議惡化，均可以導致有無線局域網的6個方面的安全漏洞，指出了需充分利用RADIUS/EAP分組結構的數據段提供加密認證并且還需設計雙門接入的認證機制。最后比較了常見的四種安全接入方案，指出了在不同程度和范圍內具有一定的抵御各種攻擊的能力。This paper introduces the authentication and the architecture of IEEE802.1x Wireless Local Area Network based on the RADIUS/EAP, with respect to the characteristics of three parties coloration in accessing to WLAN, analyses the security mechanism, indicates that there would exist six security crushers either by the protocol defects or by the inadequate usage and deteriorating and it is necessary to fully utilize the data frame in the RADIUS/EAP structure for the encryption and authentication as well as to design the double-doors authenticated access mechanism. The four common authentication solutions are compared and the corresponding security functions in certain different extents are evaluated.