Dynamic Vlan Assignments; Figure 78: Multiple Supplicant Mode - Allied Telesis T-8100L/8 User Manual

Dynamic VLAN
Assignments
An example of this authenticator operating mode is illustrated in
Figure 78. The supplicants are connected to a hub or non-802.1x-
compliant switch which is connected to an authenticator port on the
switch. If the port is configured as 802.1x authenticator, the supplicants
must successfully authenticate before they can forward traffic through
the switch.
Port 6
Role: Authenticator
Operating Mode: Multiple
Supplicant mode
Figure 78. Multiple Supplicant Mode
With 802.1x port-based network access control, you can link a username
and password combination or MAC address to a specific VLAN so that the
switch automatically moves the port to the appropriate VLAN when a
supplicant logs on. This frees the network manager from having to
reconfigure VLANs as end users access the network from different points
or where the same workstation is used by different individuals at different
times.
To use this feature, you have to enter a VLAN identifier, along with other
information, when you create a supplicant account on the RADIUS server.
The server passes the identifier to the switch when a user logs on with a
valid username and password combination or MAC address, depending
on the authentication method.
How the switch responds when it receives VLAN information during the
authentication process can differ depending on the operating mode of the
authenticator port.
AT-8100 Series Version 2.2.5.0 Web Interface User's Guide
Ethernet hub or
non-802.1x-compliant
switch
Authenticated
Supplicants
RADIUS
Authentication
server
205