Allied Telesis AT-GS950/48, User Manual

Page: 293 / 410

AT-GS950/48 Web Interface User Guide
293
You can use the client with 802.1x port-based access control to
authenticate which packets are forwarded through the switch. This section
explains how to configure on the switch and contains the
following sections:
 “ Overview”

“General Guidelines”
 “ Configuration” on page 294
Note
To activate the feature, you must also configure the port-
based network access control feature. See “Port Access Control” on
page 284.
Note
To permanently save your new settings or any changes to the
configuration file, select
Save Settings to Flash from the main
menu on the left side of the page.
Overview
(Terminal Access Controller Access-Control System Plus) is an
authentication protocol for enhancing the security of your network. The
protocol transfers the task of authenticating network access from a
network device to an authentication protocol server.
is similar to RADIUS, however, certain differences are as
follows:

separates authentication and authorization
in a user profile, whereas, RADIUS combines
authentication and authorization.

TACACS uses TCP instead of UDP.
The AT-S116 Management software comes with client
software. You can use the software together with 802.1x port-
based access control. To control which end users and end nodes can
send packets through the switch, you can configure the client
using “ Configuration” on page 294.
General
Guidelines
The following guidelines apply when using the protocol.
 You must install server software on a
network server or management station. Authentication
protocol server software is not available from Allied