IGS-9084GP-FB2 Series User Manual
ORing Industrial Networking Corp
127
There are no EAPOL frames involved in this authentication, and therefore, MAC-based
authentication has nothing to do with the 802.1X standard.
The advantage of MAC-based authentication over 802.1X is that several clients can be
connected to the same port (e.g. through a 3rd party switch or a hub) and still require individual
authentication, and that the clients do npt need special supplicant software to authenticate.
The disadvantage is that MAC addresses can be spoofed by malicious users, equipment
whose MAC address is a valid RADIUS user can be used by anyone, and only the
MD5-Challenge method is supported.
802.1X and MAC-Based authentication configurations consist of two sections: system- and
port-wide.
Label
Description
Mode
Indicates if 802.1X and MAC-based authentication is globally
enabled or disabled on the switch. If globally disabled, all ports
are allowed to forward frames.
Reauthentication
Enabled
If checked, clients are reauthenticated after the interval specified
by the Reauthentication Period. Reauthentication for
802.1X-enabled ports can be used to detect if a new device is
plugged into a switch port.
For MAC-based ports, reauthentication is only useful if the
