Hirschmann MACH 4000 Series, User Manual

Page: 88 / 236

Protection from unauthorized access
88
6.5 Port Authentication
Basic - L3P
Release 3.1 06/07
6.5.2 Authentication process
A supplicant tries to communicate via a Switch port.
D
The Switch requests authentication from the supplicant. At that time only
EAPOL traffic is permitted between the supplicant and the Switch.
D
The supplicant replies his identification data.
D
The Switch forwards the identication data to the authentication server.
D
The authentication server replies concerning the autherization.
D
The Switch evaluates the reply and allows access to the supplicant at this
port (or leaves the port in the blocked state).
6.5.3 Preparing the switch for the
802.1X port authentication
V
Configure your own IP parameters (for the Switch).
V
Globally Switch on the function of the 802.1X port authentication.
V
Set the 802.1X port control to “auto”. The default setting is
“force-authorized”.
V
Enter the “shared secret” between the Authenticator and the Radius
server. The shared secret is a text string specified by the Radius server
administrator.
V
Enter the IP address and the port of the Radius server. The default UDP
port of the Radius server is the port 1812.