ZyXEL Communications XGS2220 Series, Руководство пользователя

Страница: 519 / 655

Chapter 76 Port Authentication
XGS2220 Series User’s Guide
519
• Use the Compound Authentication screen ( Section 76.5 on page 525 ) to allow network access for
clients that pass either IEEE 802.1x authentication OR MAC authentication, or pass both IEEE 802.1x
authentication AND MAC authentication.
76.1.2 What You Need to Know
IEEE 802.1x Authentication
The following figure illustrates how a client connecting to a IEEE 802.1x authentication enabled port goes
through a validation process. The Switch prompts the client for login information in the form of a user
name and password after the client responds to its identity request. When the client provides the login
credentials, the Switch sends an authentication request to a RADIUS server. The RADIUS server validates
whether this client is allowed access to the port.
Figure 384 IEEE 802.1x Authentication Process
76.1.3 MAC Authentication
MAC authentication works in a very similar way to IEEE 802.1x authentication. The main difference is that
the Switch does not prompt the client for login credentials. The login credentials are based on the
source MAC address of the client connecting to a port on the Switch along with a password configured
specifically for MAC authentication on the Switch.