8 Security
41
8 Security
It mainly introduces Management Security, Port Authentication, MAC Authentication and
Storm Control.
The 802.1x protocol (802.1x for short) was developed by IEEE802 LAN/WAN committee to
address security issues of wireless LANs. It was then used in Ethernet as a common access
control mechanism for LAN ports to address mainly authentication and security problems.
802.1x is a port-based network access control protocol. It authenticates and controls devices
requesting for access in terms of the ports of LAN access control devices. With the 802.1x
protocol employed, a user-side device can access the LAN only when it passes the
authentication. Those fail to pass the authentication are denied when accessing the LAN, as
if they are disconnected from the LAN.
8.1 Management Security
Note: Enable 802.1x in
3 Advanced Configuration
before configuring Radius.
This page configures the 802.1x system as follows: Authentication RADIUS Server IP,
Authentication Port, Authentication Shared Key, Accounting RADIUS Server IP, Accounting
Port and Accounting Shared Key.
Authentication RADIUS Server IP:
IP address of the radius server to be used, a valid
unicast address in dotted decimal notation; the default value is 192.168.0.234.
Authentication Port:
UDP port number of the radius server, ranging from 0 to 65535; the
default value is 1812.
Authentication Shared Key:
Sets a shared key for radius messages. String length is 1 to 15
characters.
Accounting RADIUS Server IP:
IP address of accounting radius server to be used, a valid
unicast address in dotted decimal notation; the default value is 192.168.0.234.
Accounting Port:
UDP port number of the radius server, ranging from 0 to 65535; the
default value is 1813.
Accounting Shared Key:
Sets a shared key for accounting radius. String length is from 1
to 15 characters.
The authentication server system is an entity that provides authentication service to the
authenticator system. Normally in the form of a RADIUS server, the authentication server
system serves to perform AAA (authentication, authorization, and accounting) services to
users. It also stores user information, such as user name, password, the VLAN a user
belongs to, priority, and the ACLs (access control list) applied.
Set RADIUS configuration, including the authentication RADIUS server IP, authentication port,
authentication shared key, accounting RADIUS server IP, accounting port and accounting
