Cambium Networks PTP 450 Series, Руководство по настройке

Страница: 172 / 649

Chapter 1: Configuration Configuring 802.1X authentication
Page
1-144
Configuring 802.1X authentication
IEEE 802.1x standard defines a client and server-based access control and authentication protocol. This
protocol restricts unauthorized clients from connecting to a LAN through publicly accessible ports.
The authentication server authenticates each client connected to SM's ethernet port and enables the
port before making available any services offered by the SM, AP, and the network. Until the client is
authenticated, 802.1x access control allows only Extensible Authentication Protocol over LAN (EAPoL)
traffic through the port to which the client is connected. After authentication is successful, normal traffic
can pass through the port.
Two types of authentication mode are supported:
• Port based authentication: This mode needs to be used when single host is connected to the SM. If
the authentication is successful by the host connected to the SM, SM port is enabled, and all traffic
will pass through.
• MAC Address Based Authentication: This mode needs to be used when multiple hosts are
connected to the SM. Each host needs to be authenticated by 802.1X protocol to access the
network. The traffic is filtered based on the source MAC Address of the host, only the traffic from
authenticated host will be allowed to access the network.
802.1X authentication page of AP
The 802.1X Authentication page of AP is explained in Table 44 .
Table 44 802.1X authentication attributes –450 Platform Family AP
Attribute Meaning
802.1X Authentication This parameter is used to enable or disable 802.1Xauthentication. It is
disabled by default.
802.1X Authentication
Server DNS Usage This parameter is enabled when server address is in fully qualified domain
name format.
Shared Secret This parameter specifies the the shared secret which is configured for this
client on RADIUS server. Maximum length of this parameter is 32 characters.
802.1X Authentication
Server This parameter specifies either a dotted decimal notation (IP address) or
fully qualified domain name (
www.google.com ). Maximum length of this
parameter is 256 characters.