Product Manual — Doc. 8559B 4-Series™ Control Systems • 177
802.1X
802.1X is an IEEE network standard designed to enhance the security of wireless and Ethernet
LANs. It is widely used in corporate networks to provide an authentication mechanism for
devices wishing to connect to the network. The standard relies on the exchange of messages
between the device and the network's host, or authentication server.
To enable and configure 802.1X for the control system:
1.
Issue the 8021xauthenticate on command to enable 802.1X.
2.
Issue the 8021xvalidateserver on command to allow the control system to verify the
identity of the network's authentication server. Issuing this command allows certificates
signed by trusted CAs (Certificate Authorities) to be selected, which is used during server
validation.
NOTE: Using the 8021xvalidateserver command is optional based on the
recommendation of the network administrator, but the option should be enabled for
most applications.
3.
Issue the 8021xmethod [password | certificate] command to select the secure
password method or the certificate method depending on the network administrator's
requirement.
4.
If the certificate method was selected, issue the certificate add machine
{certificate_name} {password} command to add the machine certificate supplied by
the network administrator to the certificate store. Refer to Add a Certificate (on
page169).
NOTE: The machine certificate is an encrypted PFX file that will be supplied by the
network administrator, along with the certificate password. The machine certificate is
used to verify the identity of the control system.
5. If the password method was selected, enter the username and password supplied by the
network administrator:
a.
Issue the 8021xusername [username] command to enter the username supplied by
the network administrator.
b.
Issue the 8021xpassword [password] command to enter the password supplied by
the network administrator.
NOTE: A machine certificate is not required for the password method.