TP-Link TL-SG5412F User Manual

3.
The 802.1X client program responds by sending an EAP-Response/Identity packet to the
switch with the user name included. The switch then encapsulates the packet in a RADIUS
Access-Request packet and forwards it to the RADIUS server.
4. Upon receiving the user name from the switch, the RADIUS server retrieves the user name,
finds the corresponding password by matching the user name in its database, encrypts the
password using a randomly-generated key, and sends the key to the switch through an
RADIUS Access-Challenge packet. The switch then sends the key to the 802.1X client
program.
5. Upon receiving the key (encapsulated in an EAP-Request/MD5 Challenge packet) from the
switch, the client program encrypts the password of the supplicant system with the key and
sends the encrypted password (contained in an EAP-Response/MD5 Challenge packet) to
the RADIUS server through the switch. (The encryption is irreversible.)
6. The RADIUS server compares the received encrypted password (contained in a RADIUS
Access-Request packet) with the locally-encrypted password. If the two match, it will then
send feedbacks (through a RADIUS Access-Accept packet and an EAP-Success packet) to
the switch to indicate that the supplicant system is authorized.
7. The switch changes the state of the corresponding port to accepted state to allow the
supplicant system access the network. And then the switch will monitor the status of
supplicant by sending hand-shake packets periodically. By default, the switch will force the
supplicant to log off if it can not get the response from the supplicant for two times.
8. The supplicant system can also terminate the authenticated state by sending EAPOL-Logoff
packets to the switch. The switch then changes the port state from accepted to rejected.
（2） EAP Terminating Mode
In this mode, packet transmission is terminated at authenticator systems and the EAP packets are
mapped into RADIUS packets. Authentication and accounting are accomplished through RADIUS
protocol.
In this mode, PAP or CHAP is employed between the switch and the RADIUS server. This switch
supports the PAP terminating mode. The authentication procedure of PAP is illustrated in the
following figure.
Figure 11-20 PAP Authentication Procedure
166

TP-Link TL-SG5412F Specifications

General

MAC address table	8000 entries
Jumbo frames support	Yes
Maximum data transfer rate	1 Gbit/s
Supported data transfer rates	10, 100, 1000Mbps
Fan	0
Wi-Fi	No
Diagnostics	VCT
Management platform	SNMP, RMON, WEB/CLI/Telnet
Authentication method	802.1X, Radius
Packet transfer speed	17.99Mpps
Connectivity technology	Wired
Networking standards	IEEE 802.1D, IEEE 802.1p, IEEE 802.1Q, IEEE 802.1s, IEEE 802.1w, IEEE 802.1x, IEEE 802.3, IEEE 802.3ab, IEEE 802.3ad, IEEE 802.3i, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z
Ethernet LAN data rates	10, 100, 1000 Mbit/s
Copper ethernet cabling technology	1000BASE-T, 100BASE-TX, 10BASE-T
DHCP features	DHCP client
Security algorithms	SSH, SSL/TLS
Switch type	Managed
Switch layer	L2
Console port	RJ-45
Fiber optic connector	SFP
SFP/SFP+ slots quantity	12
Basic switching RJ-45 Ethernet ports quantity	4
Fiber ethernet cabling technology	100BASE-FX
AC input voltage	100 - 240 V
AC input frequency	50 - 60 Hz
Stackable	-
Form factor	1U
Certification	CE, FCC
Product color	Black
Compatible operating systems	Windows 98SE, NT, 2000, XP, Vista, Windows 7\\r MAC OS\\r NetWare\\r UNIX\\r Linux
Storage temperature (T-T)	-40 - 70 °C
Operating temperature (T-T)	0 - 40 °C
Storage relative humidity (H-H)	5 - 90 %
Operating relative humidity (H-H)	10 - 90 %

Weight and Dimensions

Depth	260 mm
Width	440 mm
Height	44 mm