Ruijie RG-S2900G-E Series, Configuration Manual

Page: 507 / 943

Configuration Guide 802.1x Configuration

The ports connected to the Radius Server and the uplink ports are configured as uncontrolled ports , so that the
switch can normally communicate with the server and the authorized users can access network resources through
the uplink interface.

The ports connected to the user must be set as controlled ports to control the accessed users, and the users
cannot access network resources unless they first pass the authentication.
Characteristics of this solution:

Each 802.1x-enabled switch is responsible for a small number of clients, thus offering higher speed.The devices are
mutually independent, and the restart operation of the device does not affect the users connected with other devices.

User management is performed on the Radius Server in a centralized manner. The administrator does not have to
know which switch a user is connected to, making management much easier.

The administrator can manage the device on the access layer through the network.
Scheme 2: The 802.1x-enabled device is used as the convergence layer device
Figure 0-4
This solution is described as below:
Requirements of this solution:

The user supports 802.1x. That is, it is installed with the 802.1x client (Windows XP carried, Star-supplicant or other
IEEE802.1x compliant client software).

The access layer device should be able to transparently transmit IEEE 802.1x. frames (EAPOL)

The convergence layer device supports 802.1x (playing the role of the authenticator)

One or multiple RADIUS compliant servers are available as the authentication server.
Key points for configuration of this solution:

The ports connected to the Radius Server and the uplink ports are configured as uncontrolled ports, so that the
switch can normally communicate with the server and the authorized users can access network resources through
the uplink interface.