802.1x Configuration
423
Fig 47-12 the Authentication Flow of 802.1x EAP Termination Mode
47.1.6
The Extension and Optimization of 802.1x
Besides supporting the port- based access authentication method specified by the
protocol, devices also extend and optimize it when implementing the EAP relay mode and
EAP termination mode of 802.1x.
Supports some applications in the case of which one physical port can have more
than one users
There are three access control methods (the methods to authenticate users):
port-based, MAC-based and user-based (IP MAC port).
When the port-based method is used, as long as the first user of this port passes
the authentication, all the other users can access the network resources without
being authenticated. However, once the first user is offline, the network won‘t be
available to all the other users.
When the MAC-based method is used, all the users accessing a port should be
authenticated separately, only those pass the authentication can access the