7705 SAR Interfaces
162
Interface Configuration Guide
3HE 11011 AAAC TQZZA Edition: 01
Figure 19 Authentication Scenario
3.3.2 802.1x Modes
The 7705 SAR supports port-based network access control for Ethernet ports only.
Each Ethernet port can be configured to operate in one of three different modes,
controlled by the port-control command:
• auto — enables 802.1x authentication. The port starts in the unauthorized state,
allowing only EAPOL frames to be sent and received through the port. Both the
authenticator and the host (supplicant) can initiate an authentication process as
described earlier. The port will remain in the unauthorized state until the first
supplicant is authenticated successfully. After this, traffic is allowed on the port
for all connected hosts.
• force-auth — disables 802.1x authentication and causes the port to transition to
the authorized state without requiring any authentication exchange. The port
transmits and receives normal traffic without requiring 802.1x-based host
authentication. This is the default setting.
AccessRequest
Access Request
Access Challenge
Access Accept
EAPOL Start
EAP-Response/ID
EAP-Request/ID
EAP-Response/OTP
EAP-Logoff
EAP-Request/OTP
EAP-Success
EAP-Request/ID
21374
Supplicant
7705 SAR
(Authenticator)
RADIUS
Authentication
server
Quiet-
period
Port Unauthorized
Port Authorized
Port Unauthorized
To Next Page
Loading...
