Solutions
Provider
for
FTTx,
RFoG
and
HFC
www.ascentcomtec.com
Page
41
of
114
10.2
Port
Authentication
IEEE
802.1x
authentication
system
uses
EAP
protocol
to
exchange
information
between
a
RADIUS
client
and
the
RADIUS
server.
When
the
client
passes
the
authentication,
the
server
will
send
user
information
to
the
device,
and
then
PAE
decides
whether
to
set
the
port
as
authorized
or
unauthorized
according
to
the
RADIUS
indication:
accept
or
reject.
Note
：
Enable
802.1
in
Advanced
Configuration
first.
10.2.1
802.1x
Port
RADIUS
operates
in
the
following
manner:
1.
The
host
initiates
a
connection
request
carrying
the
username
and
password
to
the
RADIUS
client.
2.
Having
received
the
username
and
password,
the
RADIUS
client
sends
an
authentication
request
(Access
‐
Request)
to
the
RADIUS
server,
with
the
user
password
encrypted
by
using
the
Message
‐
Digest
5
(MD5)
algorithm
and
the
shared
key.
3.
The
RADIUS
server
authenticates
the
username
and
password.
If
the
authentication
succeeds,
it
sends
back
an
Access
‐
Accept
message
containing
the
user’s
authorization
information.
If
the
authentication
fails,
it
returns
an
Access
‐
Reject
message.
4.
The
RADIUS
client
permits
or
denies
the
user
according
to
the
returned
authentication
result.
If
it
permits
the
user,
it
sends
a
start
‐
accounting
request
(Accounting
‐
Request)
to
the
RADIUS
server.
5.
The
RADIUS
server
returns
a
start
‐
accounting
response
(Accounting
‐
Response)
and
starts
accounting.
