Asus GigaX2024SX - Manual (Page 72)

Configuring 802.1x Port Authentication
Network switches can provide open and easy access to network resources by
guration and access is
rized personnel to easily intrude and
possibly gain access to sensitive network data.
ized access to a network by requiring users to first submit
ation. Access to all switch ports in a network can be
server, which means that authorized users can use the
tocol over LANs (EAPOL) to
a remote
server to verify user identity and access rights. When a
cator)
t. The client provides its identity (such as
rds to the
ent identity and sends an
not only the challenge, but the authentication method to be used. The
other, depending on the
configuration of the client software and the RADIUS server. The authentication
method must b
ethod with its
redentials, such as a password or certificate. The RADIUS server verifies the
sponds with an accept or reject packet. If authentication is
ch allows the client to access the network. Otherwise, network
simply attaching a client PC. Although this automatic confi
a desirable feature, it also allows unautho
The IEEE 802.1x (dot1x) standard defines a port-based access control procedure
that prevents unauthor
credentials for authentic
centrally controlled from a
same credentials for authentication from any point within the network.
This switch uses the Extensible Authentication Pro
exchange authentication protocol messages with the client, and
RADIUS authentication
client (i.e., Supplicant) connects to a switch port, the switch (i.e., Authenti
responds with an EAPOL identity reques
a user name) in an EAPOL response to the switch, which it forwa
RADIUS server. The RADIUS server verifies the cli
access challenge back to the client. The EAP packet from the RADIUS server
contains
client can reject the authentication method and request an
e MD5. The client responds to the appropriate m
c
client credentials and re
successful, the swit
access is denied and the port remains blocked.
T lowing:
•
•
and the IP address of the
R
•
Auto” mode.
he operation of 802.1x on the switch requires the fol
The switch must have an IP address assigned.
RADIUS authentication must be enabled on the switch
ADIUS server specified.
Each switch port that will be used must be set to dot1x “
3-47