NETGEAR M4200

MAB
376
Managed Switches
Figure 42. MAB operation
The following figure shows a switch that has MAB configured on port 1/0/1. The IP phone that
is connected to this port can access the network after being authenticated successfully by the
Microsoft network policy server.
Figure 43. MAB topology with a switch, IP phone, and Microsoft server
Unknown client Switch
RADIUS server
1. Traffic from an unknown client
The switch learns the MAC address
2. EAPoL Request Identity message (30 seconds)
3. EAPoL Request Identity message (30 seconds)
4. EAPoL Request Identity message (30 seconds)
5. EAPoL time-out and MAB initiation (30 seconds)
6. RADIUS Accept-Request message
7. RADIUS Accept-Access message
8. The unknown client is authenticated
IP phone
MAC address 3C07545AC8C0
Microsoft Windows
2008 R2 Server
IP address 10.1.10.46
Port 1/0/1
Port 1/0/10
Switch
IP address 10.1.10.50