Configuring the ECN330-switch
146 1553-KDU 137 365 Uen D 2006-06-16
Figure 49 IEEE 802.1X Port Authentication
The operation of dot1x on the ECN330-switch requires the following:
• The ECN330-switch must have an IP address assigned.
• RADIUS authentication must be enabled on the ECN330-switch and the
IP address of the RADIUS server specified.
• Each ECN330 port that will be used must be set to dot1x “Auto” mode.
• Each client that needs to be authenticated must have dot1x client
software installed and properly configured.
• The RADIUS server and 802.1X client support EAP. (The ECN330-
switch only supports EAPOL in order to pass the EAP packets from the
server to the client.)
• The RADIUS server and client also have to support the same EAP
authentication type – MD5. (Some clients have native support in
Windows, otherwise the dot1x client must support it.)
802.1x
client
RADIUS
server
1. Client attempts to access a switch port.
2. Switch sends client an identity request.
3. Client sends back identity information.
4. Switch forwards this to authentication server.
5. Authentication server challenges client.
6. Client responds with proper credentials.
7. Authentication server approves access.
8. Switch grants client access to this port.
To Next Page
Loading...
