MLis MLB-E4203-28-F, User Manual

Page: 82 / 85

78
802.1x Authentication Application Guide
Introduction of 802.1x authentication function
IEEE 802.1x derives keys which can be used to provide per-packet authentication, integrity and
confidentially. Typically use along with well-known key derivation algorithms (e.g. TLS, SRP,
MD5-Challenge, etc.). In our industrial switch (RACK-MOUNT SWITCH), we support 802.1x
authentication function per port (port1~port10). You should enable 802.1x function of the system, and
choose ports and type you want to apply. If RACK-MOUNT SWITCH enable 802.1x authentication
control for certain Ethernet port, this port should be authenticated before using any service from the
network. Please see the following description.
802.1x Timer in RACK-MOUNT SWITCH
Item Parameter (sec) Description
1 ReAuth Period
RACK-MOUNT SWITCH will restart authentication after each Reauth-Period
when authentication success and ReAuth option is enabled
2 Quiet Period
RACK-MOUNT SWITCH will wait QuietPeriod to restart authentication
process again when authentication failed in previous time.
3 Tx Period
RACK-MOUNT SWITCH will send EAP-request to Supplicant every TxPeriod
when authentication is running and Quiet Period is not running.
4 Supplicant Timeout
RACK-MOUNT SWITCH will wait SupplicantTmeout to receive response
from Supplicant.
5 Server Timeout
RACK-MOUNT SWITCH will wait ServerTimeout to receive response from
RADIUS server.
Configuration in RADIUS Server
Step 1: Prepare a Linux PC with RADIUS server installed.
Step 2: Edit secret key for Radius server.
Setting:
client 20.20.20.0/24 {
secret = a1b2c3d4
}
The secret in the
RACK-MOUNT SWITCH
should be the same with this
one.