Ruckus Wireless ZoneFlex 7363, Руководство пользователя, Страница: 94 / 128

86
Configuring the Access Point
Configuring Ethernet Ports
Access Port
Access Ports are used to provide network access. Traffic arriving on different Access
Ports can be segmented into different logical networks (VLANs) using the Untag VLAN
ID field. Access Ports are members of only one VLAN--the VLAN that is configured in
the Untag VLAN field.
General Port
The General Port can be configured to support multiple tagged VLANs and one
untagged VLAN. As Trunk Ports by definition are members of all VLANs, the General
Port is the only port type for which membership is user configurable.
Working with 802.1X on Wired Ethernet Ports
802.1X authentication consists of the following three components:
■
Supplicant : The supplicant sends access request messages along with credentials,
such as user name / password or digital certificate, to an authenticator, which
forwards the credentials to the authentication server for verification.
■
Authenticator : The authenticator challenges the identity of the supplicant, then
passes its credentials to the AAA server. If the credentials are accepted the
supplicant is allowed access.
■
Authentication Server (AAA Server) : The AAA server verifies the supplicant’s
credentials and permits or rejects its request for access.
For wired 802.1X, a Ruckus AP’s Ethernet port can be configured as either an
Authenticator or as a Supplicant , depending on which port type is selected. Table 27
and Table 28 describe the 802.1X roles available by port type.
Table 27. Authenticator support by port type
Table 28. Supplicant support by port type
The following considerations apply:
Trunk Port Access Port General Port
Port-based mode X X X
MAC-based mode X
Trunk Port Access Port General Port
Supplicant X