802.1X Quarantine Method
About 802.1X
11-2
About 802.1X
802.1X is a port-based authentication protocol that can dynamically vary
encryption keys, and has three components as follows:
■
Supplicant – The client; the endpoint that wants to access the
network.
■
Authenticator– The access point, such as a switch, that prevents
access when authentication fails. The authenticator can be simple and
dumb.
■
Authentication server – The server that authenticates the user creden-
tials; usually a Remote Authentication Dial-In User Service (RADIUS)
server.
802.1X is an authentication framework that sends Extensible Authentication
Protocol (EAP) messages packaged in Ethernet frames over LANs (EAPOL).
This method provides a savings in overhead resources because it does not use
all of the resources the typical Point-to-Point protocol requires.
EAP supports multiple authentication methods such as:
■
Kerberos – An authentication system that uses an encrypted ticket to
authenticate users.
■
One-time passwords – An authentication system that uses a set of
rotating passwords, each of which is used for only one login session.
■
Certificates – A method for identifying a user that links a public key
to the user’s or company’s identity, allowing them to send digitally
signed electronic messages.
■
Tokens – A credit-card or key-fob sized authentication endpoint that
displays a number that is synchronized with the authentication server.
The number changes over time, and the user is required to enter the
current number as part of the authentication process.
■
Public key authentication – In an asymmetric encryption system, two
keys are required; a public key and a private key. Either key can
encrypt and decrypt messages, but cannot encrypt and decrypt the
same message; that is, if the public key encrypts a message, the private
key must decrypt the message.
The typical 802.1X connections are shown in Figure 11-1 on page 11-3; The
typical communication flow is as follows:
1.
A Client (supplicant) requests access from the access point (AP)
(authenticator).
Summary of Contents for 800 Series
Page 1: ...Users Guide www procurve com ProCurve Network Access Controller 800 ...
Page 2: ......
Page 3: ...ProCurve Network Access Controller 800 Release 1 1 Users Guide ...
Page 43: ...2 1 2 Clusters and Servers Chapter Contents Overview 2 2 Installation Examples 2 3 ...
Page 70: ...System Configuration Management Server 3 22 Figure 3 9 System Configuration Management Server ...
Page 79: ...System Configuration User Accounts 3 31 Figure 3 12 System Configuration User Accounts ...
Page 87: ...System Configuration User Roles 3 39 Figure 3 16 System Configuration User Roles ...
Page 206: ... This page intentionally left blank ...
Page 229: ...End user Access Mac OS X Endpoint Settings 5 23 Figure 5 8 Mac System Preferences ...
Page 262: ... This page intentionally left blank ...
Page 284: ... This page intentionally left blank ...
Page 298: ... This page intentionally left blank ...
Page 302: ...High Availability and Load Balancing High Availability 8 4 Figure 8 2 DHCP Installation ...
Page 303: ...High Availability and Load Balancing High Availability 8 5 Figure 8 3 802 1X Installation ...
Page 305: ...9 1 9 Inline Quarantine Method Chapter Contents Inline 9 2 ...
Page 308: ... This page intentionally left blank ...
Page 311: ...DHCP Quarantine Method Overview 10 3 Figure 10 1 DHCP Installation ...
Page 314: ... This page intentionally left blank ...
Page 319: ...802 1X Quarantine Method NAC 800 and 802 1X 11 5 Figure 11 2 NAC 800 802 1X Enforcement ...
Page 320: ...802 1X Quarantine Method NAC 800 and 802 1X 11 6 Figure 11 3 802 1X Communications ...
Page 376: ... This page intentionally left blank ...
Page 414: ... This page intentionally left blank ...
Page 421: ...Reports Viewing Report Details 14 7 Figure 14 3 Test Details Report ...
Page 474: ... This page intentionally left blank ...
Page 520: ...Tests Help Security Settings Windows B 34 http www pcworld com article id 112138 article html ...
Page 526: ... This page intentionally left blank ...
Page 556: ... This page intentionally left blank ...
Page 584: ... This page intentionally left blank ...
Page 585: ......