H3C S5120-EI Series, Руководство по эксплуатации

Страница: 558 / 1191

1-1
1
802.1X Configuration
Support for online user handshake security function is added in Release 2202P19 of S5120-EI series
Ethernet switches. For details, refer to
Online User Handshake Function.
When configuring 802.1X, go to these sections for information you are interested in:
z
802.1X Overview
z
Configuring 802.1X
z
Configuring an 802.1X Guest VLAN
z
Displaying and Maintaining 802.1X
z
802.1X Configuration Example
z
Guest VLAN and VLAN Assignment Configuration Example
z
ACL Assignment Configuration Example
802.1X Overview
The 802.1X protocol was proposed by IEEE802 LAN/WAN committee for security of wireless LANs
(WLAN). It has been widely used on Ethernet as a common port access control mechanism.
As a port-based access control protocol, 802.1X authenticates devices connected to the
802.1X-enabled LAN ports to control their access to the LAN.
The port security feature provides rich security modes that combine or extend 802.1X and MAC
address authentication. In a networking environment that requires flexible use of 802.1X and MAC
address authentication, you are recommended to configure the port security feature. In a network
environment that requires only 802.1X authentication, you are recommended to configure the 802.1X
directly rather than configure the port security feature for simplicity sake. For how to use the port
security feature, refer to
Port Security Configuration
in the
Security Volume
.
To get more information about 802.1X, go to these topics:
z
Architecture of 802.1X
z
Basic Concepts of 802.1X
z
EAP over LANs
z
EAP over RADIUS
z
802.1X Authentication Triggering