Port Authentication; Chapter 19 Port Authentication; Port Authentication Overview; Ieee 802.1X Authentication - ZyXEL Communications OLT2406 User Manual

19.1 Port Authentication Overview

This chapter describes the IEEE 802.1x and MAC authentication methods.
Port authentication is a way to validate access to ports on the OLT to clients based on an external server
(authentication server). The OLT supports the following methods for port authentication:
IEEE 802.1x - An authentication server validates access to a port based on a username and password
provided by the user. At the time of writing, IEEE 802.1x is not supported by all operating systems. See
your operating system documentation. If your operating system does not support 802.1x, then you may
need to install 802.1x client software.
• MAC - An authentication server validates access to a port based on the MAC address and password
of the client.
Both types of authentication use the RADIUS (Remote Authentication Dial In User Service, RFC 2138,
2139) protocol to validate users. See
RADIUS server settings.
Note: If you enable IEEE 802.1x authentication and MAC authentication on the same port, the
OLT performs IEEE 802.1x authentication first. If a user fails to authenticate via the IEEE
802.1x method, then access to the port is denied.

19.1.1 IEEE 802.1x Authentication

The following figure illustrates how a client connecting to an IEEE 802.1x authentication enabled port
goes through a validation process. The OLT prompts the client for login information in the form of a user
name and password after the client responds to its identity request. When the client provides the login
credentials, the OLT sends an authentication request to a RADIUS server. The RADIUS server validates
whether this client is allowed access to the port.

Port Authentication

RADIUS and TACACS+
OLT2406 User's Guide
162
C
H A P T E R
for more information on configuring your
19