SMC Networks 7724M/VSW - annexe 1, Руководство пользователя

Страница: 59 / 387

CLI Management Guide
TigerAccess™ EE
58 SMC7824M/VSW
4.5 802.1x Authentication
To enhance security and portability of network management, there are two ways of au-
thentication based on MAC address and port-based authentication which restrict clients
attempting to access to port.
Port-based authentication (802.1x) is used to authenticate the port self to access without
users’ count to access the network.
802.1x authentication adopts EAP (Extensible Authentication Protocol) structure. In EAP
system, there are EAP-MD5 (Message Digest 5), EAP-TLS (Transport Level Security),
EAP-SRP (Secure Remote Password), EAP-TTLS (Tunneled TLS) and the switch sup-
ports EAP-MD5 and EAP-TLS. Accessing with user’s ID and password, EAP-MD5 is 1-
way Authentication based on the password. EAP-TLS accesses through the mutual au-
thentication system of server authentication and personal authentication and it is possible
to guarantee high security because of mutual authentication system.
At a request of user Authentication, from user’s PC EAPOL-Start type of packets are
transmitted to authenticator and authenticator again requests identification. After getting
respond about identification, request to approve access to RADIUS server and be au-
thenticated by checking access through user’s information.
The following figure explains the process of 802.1x authentication.
[Suppliant] [Authenticator] [Authentication Server]
EAPOL
(EAP over LAN)
EAP over RADIUS
EAPOL-Start
EAP-Request / Identity
EAP-Response / Identity RADIUS-Access-Request
RADIUS-Access-Challenge EAP-Request
EAP-Response RADIUS-Access-Request
EAP-Success RADIUS-Access-Accept
RADIUS
Server
Fig. 4.1 Process of 802.1x Authentication