Introduction Introduction
Software Reference for SwitchBlade x3100 Series Switches (Access and Security)
6-98
Note: In release 14.2, only Single Host mode is supported.
6.9.1.1 Protocols for 802.1X
For port authentication, two protocols are used;:
• EAPoL (Extensible Authentication Protocol over LAN) - This is used for carrying EAP messages between
the Supplicant and the Authenticator over a LAN. EAPoL is defined in the 802.1X Standard. EAP is defined
in RFC 3748 and there are various EAP methods that it supports for authentication, each with varying
degrees of security. For 802.1X, EAP is used between the Supplicant and the Authentication Server and is
transparent to the Authenticator.
Note: For 802.1X, the SBx3112 has been verified to work transparently with EAP-MD5, EAP-PEAP, EAP-TLS
and EAP-TTLS, but not verified for transparency to other methods, such as EAP-OTP.
• RADIUS - This is exchanged between the Authenticator and Authentication server.
6.9.1.2 RADIUS Configuration
An overview of RADIUS is provided in Section 6.8. With Port Authentication, a RADIUS server (or multiple
RADIUS servers) can be used for 802.1X Authentication.
Note: The commands that provide this are ADD RADIUS SERVER (SEC) and SET RADIUS SERVER (SEC). In
14.2, only the types LOGIN and 802.1X are allowed.
To Next Page
Loading...
Need help?
General
