Interface Configuration Guide 7705 SAR Interfaces
Edition: 01 3HE 11011 AAAC TQZZA 167
− Message-Authenticator – used to authenticate and protect the integrity of
Access Request messages in order to prevent spoofing attacks
4. If the MAC address is approved by the RADIUS server, the 7705 SAR enables
the port for traffic transmission.
If the MAC address is rejected by the RADIUS server, the 7705 SAR enters a
quiet period, configured using the quiet-period command, and will not
authenticate the port via either 802.1x or MAC authentication. After the quiet
period expires, the 7705 SAR returns to step 1.
5. If a port that was previously authenticated with MAC authentication receives an
EAPOL-Start frame, the port will reauthenticate using 802.1x EAPOL.
While the port is unauthenticated, the port will be “down” to all upper layer protocols
or services.
To Next Page
Loading...
