Nortel BES50GE-12T PWR User Manual page 153

switch, which it forwards to the RADIUS server. The RADIUS server verifies
the client identity and sends an access challenge back to the client. The
EAP packet from the RADIUS server contains not only the challenge, but the
authentication method to be used. The client can reject the authentication
method and request another, depending on the configuration of the client
software and the RADIUS server. The authentication method must be
MD5. The client responds to the appropriate method with its credentials,
such as a password or certificate. The RADIUS server verifies the client
credentials and responds with an accept or reject packet. If authentication is
successful, the switch allows the client to access the network. Otherwise,
network access is denied and the port remains blocked.
Copyright © 2006, Nortel Networks
.
SMB
Using the Nortel Business Ethernet Switch 50 Series
NN47924-301 01.01 Standard
1.00 October 2006
802.1X port authentication 153
Nortel Networks Confidential