Port Configuration - Siemens SCALANCE X-300 Configuration Manual

Configuration using Web Based Management and Command Line Interface
4.5 The Switch menu
4.5.5.3 802.1x Port Configuration
802.1x Port Configuration
If you click on a port name in the "Port" column of the "802.1x Port Parameters" page, you
open the "802.1x Port Configuration" page:
Figure 4-58
In this screen, you can configure the authentication methods "802.1x" and "MAC
Authentication" as well as the "Guest VLAN" option for the selected port.
The functions have a hierarchical order. If all three functions are enabled, an attempt is
made initially to authenticate the end device using "802.1x". If this authentication is
unsuccessful, "MAC Authentication" is started. If this authentication is also unsuccessful, the
end device is enabled for communication in the "guest VLAN". "Guest VLAN" can only be
used if at least one authentication method is active.
The two authentication methods depend on the end device. If the end device supports EAP
(Extensible Authentication Protocol), it can be authenticated using the "802.1x" method. If
the end device does not support EAP, it can be authenticated using "MAC Authentication". In
this case, the IE switch adopts the role of the end device and uses the MAC address of the
device as the authentication parameter.
The screen contains the following sections and boxes:
156
802.1x Port Configuration
Configuration Manual, 10/2014, C79000-G8976-C187-22
SCALANCE X-300 / X-400