Network Access (Mac Address Authentication); Configuring Interface Settings For Web Authentication - Edge-Core ES3510MA-DC Management Manual

N A
ETWORK CCESS
Mark the check box for any host addresses that need to be re-
4.
authenticated, and click Re-authenticate.
Figure 155: Configuring Interface Settings for Web Authentication
(MAC A A
DDRESS UTHENTICATION
Some devices connected to switch ports may not be able to support 802.1X
authentication due to hardware or software limitations. This is often true
for devices such as network printers, IP phones, and some wireless access
points. The switch enables network access from these devices to be
controlled by authenticating device MAC addresses with a central RADIUS
server.
RADIUS authentication must be activated and configured properly
N :
OTE
for the MAC Address authentication feature to work properly. (See
"Configuring Remote Logon Authentication Servers" on page
MAC authentication cannot be configured on trunk ports.
N :
OTE
CLI R
EFERENCES
"Network Access (MAC Address Authentication)" on page 654
◆
C U
OMMAND SAGE
MAC address authentication controls access to the network by
◆
authenticating the MAC address of each host that attempts to connect
to a switch port. Traffic received from a specific MAC address is
forwarded by the switch only if the source MAC address is successfully
authenticated by a central RADIUS server. While authentication for a
MAC address is in progress, all traffic is blocked until authentication is
completed. On successful authentication, the RADIUS server may
optionally assign VLAN and quality of service settings for the switch
port.
◆ When enabled on a port, the authentication process sends a Password
Authentication Protocol (PAP) request to a configured RADIUS server.
C

Network Access (MAC Address Authentication)

)
– 287 –
| Security Measures
14
HAPTER
270.)