Chapter 7. 802.1X Port-Based Network Access Control - Lenovo Flex System Fabric CN4093 Application Manual

Chapter 7. 802.1X Port-Based Network Access Control

© Copyright Lenovo 2015
Port‐Based Network Access control provides a means of authenticating and
authorizing devices attached to a LAN port that has point‐to‐point connection
characteristics. It prevents access to ports that fail authentication and
authorization. This feature provides security to ports of the CN4093 10Gb
Converged Scalable Switch (CN4093) that connect to blade servers.
The following topics are discussed in this section:
 "Extensible Authentication Protocol over LAN" on page 90
 "EAPoL Authentication Process" on page 91
 "EAPoL Port States" on page 93
"Guest VLAN" on page 93

 "Supported RADIUS Attributes" on page 94
"EAPoL Configuration Guidelines" on page 96

89