- 28 -
Chapter 2 Configuration
Parameter
Meaning
EAP Extensions
Insert a check mark here to disable the authentication function for
all setting ports or to enable received EAP frames to pass through.
• In ports where MAC authentication was set, when an IP packet is received, the sender MAC address
is used to perform authentication.
Authentication is performed with the RADIUS server by using the sender MAC address as both the
username and the password.
Example: When the IP packet sender MAC address is 11:22:33:44:55:66
Username: 112233445566
Password: 112233445566
A RADIUS request is sent to the RADIUS server using the username and password shown above.
The user must be registered beforehand at the RADIUS server.
• MAC authentication is not started two consecutive times for the same MAC address. If MAC
authentication fails, either disconnect and reconnect the LAN cable, or try authentication again
after performing other authentication.
• The supported encryptions system are shown in the table below.
Authentication
Supported Encryption System
Simultaneous Setting
802.1X Port
802.1X (EAP-MD5, TLS, PEAP)
Not allowed
802.1X MAC
802.1X (EAP-MD5, TLS, PEAP)
Allowed
Password
PAP
Allowed
By MAC
PAP
Allowed
• If performing 802.1X MAC authentication, EAPOL-Start must be issued from the supplicant to
start authentication.
• If 802.1X port authentication was performed, MAC address filtering can no longer be used at the
applicable port.
• If PAP was used, re-authentication is not performed.
• In ports where MAC address filtering or trunking is enabled, authentication cannot be selected.
