ZyXEL Communications XS3800-28, User Manual, Page: 643 / 789

Chapter 85 Port Authentication
XS3800-28 User’s Guide
643
• Use the Compound Authentication screen ( Section 85.5 on page 652 ) to allow network access for
clients that pass either IEEE 802.1x authentication OR MAC authentication, or pass both IEEE 802.1x
authentication AND MAC authentication.
85.1.2 What You Need to Know
IEEE 802.1x Authentication
The following figure illustrates how a client connecting to a IEEE 802.1x authentication enabled port goes
through a validation process. The Switch prompts the client for login information in the form of a user
name and password after the client responds to its identity request. When the client provides the login
credentials, the Switch sends an authentication request to a RADIUS server. The RADIUS server validates
whether this client is allowed access to the port.
Figure 510 IEEE 802.1x Authentication Process
85.1.3 MAC Authentication
MAC authentication works in a very similar way to IEEE 802.1x authentication. The main difference is that
the Switch does not prompt the client for login credentials. The login credentials are based on the
source MAC address of the client connecting to a port on the Switch along with a password configured
specifically for MAC authentication on the Switch.