Chapter 18 Port Authentication
GS1920v2 Series User’s Guide
170
C
HA PTER
1 8
Po rt Authe ntic a tio n
18.1 Po rt Authe ntic a tio n O ve rvie w
This chapter describes the IEEE 802.1x and MAC authentication methods.
Port authentication is a way to validate access to ports on the Switch to clients based on an external
server (authentication server). The Switch supports the following methods for port authentication:
•
IEEE 802.1x
2
- An authentication server validates access to a port based on a username and
password provided by the user.
•
MAC Authe ntic a tio n
- An authentication server validates access to a port based on the MAC address
and password of the client.
Both types of authentication use the RADIUS (Remote Authentication Dial In User Service, RFC 2138,
2139) protocol to validate users. See
RADIUS and on page 226
for more information on
configuring your RADIUS server settings.
Note: If you enable IEEE 802.1x authentication and MAC authentication on the same port, the
Switch performs IEEE 802.1x authentication first. If a user fails to authenticate via the IEEE
802.1x method, then access to the port is denied.
18.1.1 Wha t Yo u C a n Do
• Use the
Po rt Authe ntic a tio n
screen (
Section 18.2 on page 171
) to display the links to the configuration
screens where you can enable the port authentication methods.
• Use the
802.1x
screen (
Section 18.3 on page 172
) to activate IEEE 802.1x security.
• Use the
MAC Authe ntic a tio n
screen (
Section 18.4 on page 175
) to activate MAC authentication.
18.1.2 Wha t Yo u Ne e d to Kno w
IEEE 802.1x Authe ntic a tio n
The following figure illustrates how a client connecting to a IEEE 802.1x authentication enabled port goes
through a validation process. The Switch prompts the client for login information in the form of a user
name and password. When the client provides the login credentials, the Switch sends an authentication
request to a RADIUS server. The RADIUS server validates whether this client is allowed access to the port.
2.
At the time of writing, IEEE 802.1x is not supported by all operating systems. See your operating system
documentation. If your operating system does not support 802.1x, then you may need to install 802.1x client
software.
Содержание GS1920-48HPv2
Страница 19: ...19 PA RT I Use r s Guide...
Страница 43: ...43 PA RT II T e c hnic al Re fe re nc e...
Страница 124: ...Chapter 9 VLAN GS1920v2 Series User s Guide 124 Figure 97 Advanced Application VLAN Port Based VLAN Setup Port Isolation...
Страница 155: ...Chapter 13 Spanning Tree Protocol GS1920v2 Series User s Guide 155 Figure 118 MSTP and Legacy RSTP Network Example...
Страница 193: ...GS1920v2 Series User s Guide 193 Figure 140 Classifier Example...
Страница 224: ...Chapter 24 Multicast GS1920v2 Series User s Guide 224 Figure 162 MVR Group Configuration Example 2 EXAMPLE...
Страница 367: ...Chapter 40 Access Control GS1920v2 Series User s Guide 367 Figure 271 Example Lock Denoting a Secure Connection EXAMPLE...
Страница 388: ...Chapter 48 Configure Clone GS1920v2 Series User s Guide 388 Figure 284 Management Configure Clone...
