Luxul XMS-1024P - Manual (Page 212)

212
XMS-1024P
a: 14203 Minuteman Drive, Suite 201, Draper, UT 84020-1685 | luxul.com | 801-822-5450
LUX-UG-XMS-1024P Vers: 081314
Figure 12-18 EAP-MD5 Authentication Procedure
„
A Supplicant launches an 802.1X/RADIUS Client program using its registered User
Name and Password to initiate an Access Request by sending an EAPOL-Start packet
to the Switch. The 802.1X Client program then forwards the packet to the Switch to
start the Authentication process.
„
Upon receiving the Authentication Request packet, the Switch sends an EAP-
Request/Identity packet to ask the 802.1X/RADIUS Client program for the
User Name.
„
The 802.1X/RADIUS Client program responds by sending an EAP-Response/Identity
packet to the Switch with the User Name included. The Switch then encapsulates the
packet in a RADIUS Access-Request packet and forwards it to the RADIUS Server.
„
Upon receipt of the User Name from the Switch, the RADIUS Server retrieves the
User Name, fi nds the corresponding Password by matching the User Name in its
Database, encrypts the Password using a randomly-generated key and sends the key
to the Switch using a RADIUS Access-Challenge packet. The Switch then sends the
key to the 802.1X/RADIUS Client program.