Network Access Control - Linksys LGS308 User Manual

Network Access Control

802.1x authentication restricts unauthorized clients from connecting to a LAN through publicity-
accessible ports. 802.1x authentication is a client-server model. In this model, network devices
have the following specific roles:
• Client or supplicant
Authenticator
•
• Authentication server
This is described in the figure below:
A network device can be either a client/supplicant, an authenticator or both per port.
Client or Supplicant
A client or supplicant is a network device that requests access to the LAN. The client is connected
to an authenticator.
If the client uses the 802.1x protocol for authentication, it runs the supplicant part of the 802.1x
protocol and the client part of the EAP protocol.
Authenticator
An authenticator is a network device that provides network services and to which supplicant
ports are connected.
The following authentication modes on ports are supported:
• Multiple Host (802.1x)—Supports port-based authentication. If one client is
authenticated, all client devices attaching to the port have access.
• Multiple Sessions—Supports client-based authentication. Each client must be
authenticated individually before receiving access.
See Port Host Modes
In 802.1x-based authentication, the authenticator extracts the EAP messages from the 802.1x
messages (EAPOL frames) and passes them to the authentication server, using the RADIUS
protocol.
for more information.
155