User’s Manual of NS3550-24T/4S
199
to authenticate. The disadvantage is that MAC addresses can be spoofed by malicious users; equipment whose MAC address is
a valid RADIUS user can be used by anyone, and only the MD5-Challenge method is supported.
The 802.1X and MAC-Based Authentication configuration consists of two sections, a system- and a port-wide.
Overview of User Authentication
It is allowed to configure the Managed Switch to authenticate users logging into the system for management access using local or
remote authentication methods, such as telnet and Web browser. This Managed Switch provides secure network management
access using the following options:
Remote Authentication Dial-in User Service (RADIUS)
Terminal Access Controller Access Control System Plus ()
Local user name and Priviledge Level control
RADIUS and
are logon authentication protocols that use software running on a central server to control access to
RADIUS-aware or TACACS-aware devices on the network. An
authentication server
contains a database of multiple user name
/ password pairs with associated privilege levels for each user that requires management access to the Managed Switch.
4.11.1 Understanding IEEE 802.1X Port-Based Authentication
The IEEE 802.1X standard defines a client-server-based access control and authentication protocol that restricts unauthorized
clients from connecting to a LAN through publicly accessible ports. The authentication server authenticates each client
connected to a switch port before making available any services offered by the switch or the LAN.
Until the client is authenticated, 802.1X access control allows only
Extensible Authentication Protocol over LAN (EAPOL)
traffic through the port to which the client is connected. After authentication is successful, normal traffic can pass through the port.
This section includes this conceptual information:
Device Roles
Authentication Initiation and Message Exchange
Ports in Authorized and Unauthorized States
Device Roles
With 802.1X port-based authentication, the devices in the network have specific roles as shown below.
Содержание IFS NS3550-24T/4S
Страница 1: ...P N 1072569 REV 00 05 ISS 11OCT12 IFS NS3550 24T 4S User Manual ...
Страница 37: ...User s Manual of NS3550 24T 4S 37 ...
Страница 96: ...96 Figure 4 4 6 Port Mirror Configuration Page Screenshot ...
Страница 127: ...User s Manual of NS3550 24T 4S 127 Figure 4 6 10 Port 1 Port 6 VLAN Configuration ...
Страница 151: ...User s Manual of NS3550 24T 4S 151 Figure 4 8 1 Multicast Service Figure 4 8 2 Multicast Flooding ...
Страница 184: ...184 Figure 4 9 14 Voice VLAN Configuration Page Screenshot ...
Страница 204: ...204 Figure 4 11 4 Network Access Server Configuration Page Screenshot ...
Страница 234: ...234 Figure 4 12 1 Port Limit Control Configuration Overview Page Screenshot ...
Страница 250: ...250 Click to undo any changes made locally and revert to previously saved values ...
Страница 297: ...User s Manual of NS3550 24T 4S 297 ...
Страница 388: ...388 Example Show RADIUS statistics SWITCH security aaa statistics ...
Страница 410: ...410 Parameters vid VLAN ID 1 4095 Default Setting disable ...
Страница 441: ...User s Manual of NS3550 24T 4S 441 Example Enable the mirror mode for port 1 4 SWITCH mirror mode 1 4 enable ...