![background image](http://html1.mh-extra.com/html/smc-networks/6724al2/6724al2_management-manual_1300175081.webp)
C
ONFIGURING
802.1
X
P
ORT
A
UTHENTICATION
2-49
certificate. The RADIUS server verifies the client credentials and responds
with an accept or reject packet. If authentication is successful, the switch
allows the client to access the network. Otherwise, network access is
denied and the port remains blocked.
The operation of 802.1x on the switch requires the following:
•
The switch must have an IP address assigned.
•
RADIUS authentication (page 2-36) must be enabled on the switch
and the IP address of the RADIUS server specified.
•
Each switch port that will be used must be set to dot1x “Auto” mode.
•
Each client that needs to be authenticated must have dot1x client
software installed and properly configured.
•
The RADIUS server and 802.1x client support EAP. (The switch only
supports EAPOL in order to pass the EAP packets from the server to
the client.)
•
The RADIUS server and client also have to support the same EAP
authentication type-MD5, TLS, TTLS, PEAP, etc. (Some clients have
native support in windows, otherwise the dot1x client must support it.)
Displaying 802.1x Global Settings
The dot1x protocol includes global parameters that control the client
authentication process that runs between the client and the switch
(i.e., authenticator), as well as the client identity lookup process that runs
between the switch and authentication server. These parameters are
described in this section.
Summary of Contents for 6724AL2
Page 2: ......
Page 404: ...COMMAND LINE INTERFACE 3 216 ...
Page 406: ...TROUBLESHOOTING A 2 ...
Page 418: ...GLOSSARY Glossary 8 ...
Page 422: ...INDEX Index 4 ...
Page 423: ......