Introduction To 802.1X - UTStarcom iSpirit 3026 Manual

AAA is the abbreviation for " Authentication, Authorization, and Accounting". It provides an
accordant frame to configure these three safe functions i.e. Authentication, Authorization, and
Accounting. AAA configuration in fact has protect net safety that means visit control, including
which kind of users can visit the internet, which kind of services will be authorized to whom, and
how to keep accounts for users using net resources?
Authentication: to check if users can be authorized to visit
Authorization: to authorize users with which kind of services
Accounting: to record the usage of net resources by users
UTStarcom Corporation, Ltd. has provided a set of AAA solutions, including 802.1x supplicant
system, various authentication switch, and authentication accounting system HyperBoss.
802.1X supplicant system is installed in PC for users' visiting internet, only authenticated by
802.1 x supplicant system who can visit internet. ISpirit 3026 is a switch that support
authentication, which accepts authentication request by supplicant system and forward user' s
name and password to the HyperBoss, in fact the switch itself does not carry out authentication.
HyperBoss receives the request sent by switch and carries out actual authentication and makes
accounting for authenticated user.
Communications between 802.1x supplicant system and switch uses 802.1xprotocol and
between switch and HyperBoss uses RADIUS protocol.
Introduction
8.1
802.1x protocol is a kind of visit control and authentication protocol based on ports that is the
logic port including physical port, MAC Add. Or Vlan ID. Switch of UTStarcom implements
802.1x protocol based on MAC Add.
802.1X is a layer-2 protocol, authentication switch and user' s PC must be in the same subnet,
and the protocol pack should not cross net- band. 802. 1X authentication makes uses of model
of supplicants' server. There must be a server to carry out authentication for all users. Before
authenticated only authentication flow can pass through the port of switch, and after
authenticated data flow can pass through the port of switch, that is say only after authenticated
users can visit internet.
to 802.1x