5-6
Configuring Port-Based Access Control (802.1x)
Terminology
• A "failure" response continues the block on port B5 and causes port
A1 to wait for the "held-time" period before trying again to achieve
authentication through port B5.
Note You can configure a switch port to operate as both a supplicant and an
authenticator at the same time.
Terminology
Authentication Server: The entity providing an authentication service to
the switch when the switch is configured to operate as an authenticator. In
the case of a Swtich 2650 or 6108 running 802.1x, this is a RADIUS server
(unless local authentication is used, in which case the switch performs this
function using its own username and password for authenticating a suppli-
cant).
Authenticator: In HP Procurve switch applications, a device such as a Swtich
2650 or 6108 that requires a supplicant to provide the proper credentials
(username and password) before being allowed access to the network.
CHAP (MD5): Challenge Handshake Authentication Protocol.
Client: In this application, a end-node device such as a management station,
workstation, or mobile PC linked to the switch through a point-to-point LAN
link.
EAP (Extensible Authentication Protocol): EAP enables network access that
supports multiple authentication methods.
EAPOL : Extensible Authentication Protocol Over LAN,
as defined in the
802.1x standard.
MD5: An algorithm for calculating a unique digital signature over a stream of
bytes. It is used by CHAP to perform authentication without revealing the
shared secret (password).
Supplicant: The entity that must provide the proper credentials to the switch
before receiving access to the network. This is usually an end-user worksta-
tion, but it can be a switch, router, or another device seeking network services.
!FishSecurity.book Page 6 Thursday, October 10, 2002 9:19 PM
To Next Page
Loading...
Need help?
General
