GE MDS ORBIT ECR, Technical Manual

Page: 446 / 463

446 MDS Orbit MCR/ECR Technical Manual MDS 05-6632A01, Rev. F
13.0 APPENDIX H
– 802.1x Port Authentication w/ EAP
13.1 Overview
The Orbit can act as an 802.1x port authenticator for its ETH1 and ETH2 interfaces. The following
diagram depicts the Orbit 802.1x port authentication setup used throughout this document. Either EAP or
MAB mode can be configured for ETH1 and ETH2. This document shows how to configure each
component in the diagram for EAP authentication mode.
The Orbit blocks all traffic (except EAP frames) on the Ethernet port until it can authenticate the peer
connected to that port. The Orbit must be able to communicate with the RADIUS authentication server
through a non-authenticating Ethernet port or other backhaul network interface like the cellular modem.
Freeradius
authentication
server
Wireless
backhaul
ETH1
ETH2
Windows7 802.1x Peer
Kubuntu Linux 802.1x Peer
GEMDS Orbit
802.1x
authenticator
13.2 Configuration Examples
Orbit Device 13.2.1
The following shows an example of port authentication configuration on the Orbit, using EAP mode on
ETH1 and ETH2.
set system mds-radius servers ghost address 192.168.1.2
set system mds-radius servers ghost shared-secret password
set interfaces interface ETH1 security security-mode EAP
set interfaces interface ETH1 security radius-server ghost
set interfaces interface ETH2 security security-mode EAP
set interfaces interface ETH2 security radius-server ghost