5 the extension and optimization of 802.1x -290 – QTECH QSW-2800 Инструкция по настройке User Manual

Page 304

Advertising
background image

+7(495) 797-3311 www.qtech.ru
Москва, Новозаводская ул., 18, стр. 1

290

In EAP termination mode, the access control unit and the RADIUS server can use PAP or

CHAP authentication method. The following figure will demonstrate the basic operation flow

using CHAP authentication method.

The Authentication Flow of 802.1x EAP Termination Mode

38.1.5 The Extension and Optimization of 802.1x

Besides supporting the port- based access authentication method specified by the protocol,

devices also extend and optimize it when implementing the EAP relay mode and EAP

termination mode of 802.1x.

Supports some applications in the case of which one physical port can have more than one

users

There are three access control methods (the methods to authenticate users): port-based,

MAC-based and user-based (IP address+ MAC address+ port).

When the port-based method is used, as long as the first user of this port passes the

authentication, all the other users can access the network resources without being
authenticated. However, once the first user is offline, the network won’t be available to all the

other users.

Advertising