AMX NXA-ENET24 Instruction Manual page 89

verifies the client credentials and responds with an accept or reject packet. If authentication is
successful, the switch allows the client to access the network. Otherwise, network access is denied
and the port remains blocked.
The operation of 802.1x on the switch requires the following:
Displaying and Configuring the 802.1x Global Setting
The 802.1x protocol must be enabled globally for the switch system before port settings are active.
Command Attributes
Web – To display the current global setting for 802.1x, click Security, 802.1X, Information.
FIG. 35 802.1x Global Information
Web – Click Security, 802.1x, Configuration. Check the Enabled box to enable 802.1x globally for
the switch.
FIG. 36 802.1x System Authentication Control
NXA-ENET Software Management Guide
The switch must have an IP address assigned.
RADIUS authentication must be enabled on the switch and the IP address of the
RADIUS server specified.
Dot1x must be enabled globally for the switch.
Each switch port that will be used must be set to dot1x "Auto" mode.
Each client that needs to be authenticated must have dot1x client software installed and
properly configured.
The RADIUS server and 802.1x client support EAP. (The switch only supports EAPOL
in order to pass the EAP packets from the server to the client.)
The RADIUS server and client also have to support the same EAP authentication type –
MD5. (Some clients have native support in Windows, otherwise the dot1x client must
support it.)
802.1x System Authentication Control – The global setting for 802.1x.
(Default: Disabled)
Configuring the Switch
73