ZyXEL Communications ONU-2024 Series, Руководство пользователя

Страница: 121 / 268

ONU User’s Guide
121
C
H A P T E R
1 6
Port Authentication
16.1 Overview
This chapter describes the IEEE 802.1x methods.
Port authentication is a way to validate access to ports on the ONU to clients based on an
external server (authentication server). The ONU supports
IEEE 802.1x authentication, in
which an authentication server validates access to a port based on a username and password
provided by the user.
This type of authentication uses the RADIUS (Remote Authentication Dial In User Service,
RFC 2138, 2139) protocol to validate users. See
Section on page 146 for more information on
configuring your RADIUS server settings.
16.1.1 What You Can Do in the Port Authentication Screens
• The Port Authentication screen lets you choose and active an authentication method
( Section 16.2 on page 122 ).
• The 802.1x screen lets you activate IEEE 802.1x security ( Section 16.2.1 on page 123 ).
16.1.2 What You Need to Know About Port Authentication
The following terms and concepts may help as you read through this chapter.
IEEE 802.1x Authentication
The following figure illustrates how a client connecting to a IEEE 802.1x authentication
enabled port goes through a validation process. The ONU prompts the client for login
information in the form of a user name and password. When the client provides the login
credentials, the ONU sends an authentication request to a RADIUS server. The RADIUS
server validates whether this client is allowed access to the port.