Mac-Based Network Access Control - D-Link DES-3528 User Manual

xStack DES-3528 Series Layer 2 Stackable Fast Ethernet Managed Switch User Manual

MAC-Based Network Access Control

802.1X 802.1X
Client Client
Network access controlled port
Network access uncontrolled port
In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create "logical"
Ports, one for each attached device that required access to the LAN. The Switch would regard the single physical Port
connecting it to the shared media segment as consisting of a number of distinct logical Ports, each logical Port being
independently controlled from the point of view of EAPOL exchanges and authorization state. The Switch learns each
attached devices' individual MAC addresses, and effectively creates a logical Port that the attached device can then
use to communicate with the LAN via the Switch.
Ethernet Switch
802.1X 802.1X 802.1X
Client Client Client
Figure 9- 20. Example of Typical MAC-Based Configuration
802.1X 802.1X 802.1X
Client Client Client
140
RADIUS
Server
...
802.1X
802.1X
Client
Client
802.1X 802.1X
Client Client