Alcatel-Lucent 7710 SR OS, Руководство по настройке интерфейса

Страница: 87 / 436

Interface Configuration
7710 SR OS Interface Configuration Guide Page 87
802.1x Basics
Figure 19: 802.1x Architecture
The IEEE 802.1x standard defines three participants in an authentication conversation (see
Figure 19 ):
• The supplicant — This is the end-user device that requests access to the network.
• The authenticator — Controls access to the network. Both the supplicant and the
authenticator are referred to as Port Authentication Entities (PAEs).
• The authentication server — Performs the actual processing of the user information.
The authentication exchange is carried out between the supplicant and the authentication server,
the authenticator acts only as a bridge. The communication between the supplicant and the
authenticator is done via the Extended Authentication Protocol (EAP) over LANs (EAPOL). On
the back end, the communication between the authenticator and the authentication server is done
with the RADIUS protocol. The authenticator is thus a RADIUS client, and the authentication
server a RADIUS server.
OSSG038
Client Alcatel 7710 SR RADIUS
Authentication
Server
Supplicant
EAPOL RADIUS
Authenticator
Authenticator
Server