Enterasys Matrix DFE-Gold Series

Enterasys Matrix DFE-Gold Series Configuration Guide 25-1
25
Authentication Configuration
Thischapterdescribesthesetofcommandsforsupportedauthenti cationmethods.
Overview of Authentication Methods
Thefollowingauthentication methodsareavailableforcontrollingwhichusersareallowedto
access,monitor,andmanagethedevice.
• 802.1XNetworkAccessControl—usedforcontrollingaccesstonetworkresourcesonaper
port,peruser,orperendstationbasis.Formoredetails,referto“Configuring802.1X
Authentication”
onpage 25‐2.
•PortWebAuthentication(PWA)—usedforcontrollingaccesstonetworkresourcesonaper
userbasisviaHTTP.Fordetails,referto“ConfiguringPortWebAuthentication(PWA)”on
page 25‐11.
•MACAuthentication—usedforcontrollingaccesstonetworkresourcesonaperMAC
addressbasis.
Fordetails,referto“ConfiguringMACAuthentication”onpage 25‐26.
• ConvergenceEndPoint(CEP)—ConvergenceEndpoint(CEP)detectionisanEnterasys
NetworksmechanismforidentifyingIPphonesthatareconnectedtoagivenswitch.Whenan
endpointisdiscovered,apolicyisthenassignedtotheendpoint.Fordetails,
referto
“ConfiguringConvergenceEndPoints(CEP)PhoneDetection”onpage 25‐39.
For information about... Refer to page...
Overview of Authentication Methods 25-1
Configuring 802.1X Authentication 25-2
Configuring Port Web Authentication (PWA) 25-11
Configuring MAC Authentication 25-26
Configuring Convergence End Points (CEP) Phone Detection 25-39
RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment 25-50
Setting the Authentication Login Method 25-50
Configuring RADIUS 25-53
Configuring RFC 3580 25-60
Configuring TACACS+ 25-63
Note: An Enterasys Feature Guide document that contains a complete discussion on authentication
configuration exists at the following Enterasys web site: http://www.enterasys.com/support/
manuals/