ICP DAS USA FSM-510G series, User Manual, Page: 94 / 99

94
802.1x Authentication Application Guide
Introduction of 802.1x authentication function
IEEE 802.1x derives keys which can be used to provide per-packet authentication, integrity and
confidentially. Typically use along with well-known key derivation algorithms (e.g. TLS, SRP,
MD5-Challenge, etc.). In our industrial switch (FSM-510G), we support 802.1x authentication function
per port (port1~port10). You should enable 802.1x function of the system, and choose ports and type
you want to apply. If FSM-510G enable 802.1x authentication control for certain Ethernet port, this port
should be authenticated before using any service from the network. Please see the following
description.
802.1x Timer in FSM-510G
Item Parameter (sec) Description
1 ReAuth Period
FSM-510G will restart authentication after each Reauth-Period when
authentication success and ReAuth option is enabled
2 Quiet Period
FSM-510G will wait QuietPeriod to restart authentication process again
when authentication failed in previous time.
3 Tx Period
FSM-510G will send EAP-request to Supplicant every TxPeriod when
authentication is running and Quiet Period is not running.
4 Supplicant Timeout
FSM-510G will wait SupplicantTmeout to receive response from
Supplicant.
5 Server Timeout
FSM-510G will wait ServerTimeout to receive response from RADIUS
server.
Configuration in RADIUS Server
Step 1: Prepare a Linux PC with RADIUS server installed.
Step 2: Edit secret key for Radius server.
Setting: