LG-Ericsson iPECS ES-4526G, User Manual

Page: 340 / 1328

C
HAPTER
14
| Security Measures
Configuring 802.1X Port Authentication
– 340 –
ES-4500G Series
◆
EAPOL Pass Through – Passes EAPOL frames through to all ports in
STP forwarding state when dot1x is globally disabled.
(Default: Disabled)
When this device is functioning as intermediate node in the network
and does not need to perform dot1x authentication, EAPOL Pass
Through can be enabled to allow the switch to forward EAPOL frames
from other switches on to the authentication servers, thereby allowing
the authentication process to still be carried out by switches located on
the edge of the network.
When this device is functioning as an edge switch but does not require
any attached clients to be authenticated, EAPOL Pass Through can be
disabled to discard unnecessary EAPOL traffic.
W
EB
I
NTERFACE
To configure global settings for 802.1X:
1.
Click Security, Port Authentication.
2.
Select Configure Global from the Step list.
3.
Enable 802.1X globally for the switch, and configure EAPOL Pass
Through if required. Then set the user name and password to use when
the switch responds an MD5 challenge from the authentication server.
4.
Click Apply
Figure 187: Configuring Global Settings for 802.1X Port Authentication
C
ONFIGURING
P
ORT
S
ETTINGS FOR
802.1X
Use the Security > Port Authentication (Configure Interface) page to
configure 802.1X port settings for the switch as the local authenticator.
When 802.1X is enabled, you need to configure the parameters for the
authentication process that runs between the client and the switch (i.e.,
authenticator), as well as the client identity lookup process that runs
between the switch and authentication server.
CLI R
EFERENCES
◆
"802.1X Port Authentication" on page 753
C
OMMAND
U
SAGE
When the switch functions as a local authenticator between supplicant
devices attached to the switch and the authentication server, configure the