Table of Contents
Advertisement
Figure 8-4.Authenticated Protocol Internation Started from Supplicant System
If user needs to visit internet, supplicant system will firstly send EAPOL-Start to switch for
authentication requested, after which is received by switch that will send EAP-Request to
request user's name, and supplicant system will send back EAP-Response, switch picks up
EAP info. and packs it into RADIUS packet to send to authentication server system, who will
request user's password, switch send EAP-Request request user's password from supplicant
system, who will send back EAP-Response, and switch will pack EAP info. into RADIUS packet
to send to authentication server system that will check the user based on whose name and
password. If it successful authentication server system will inform switch that will send
EAP-Success to supplicant system and authorize user's logic end. EAP-Success received by
supplicant system means it is successful and user can visit Internet.
Supplicant system will send EAPOL-Logoff to switch if user needs not Internet, the switch will
forward user's logic end into un-authentication status when user cannot visit Internet.
To protect user's abnormal leave, iSpirit 3026 switch provides re-authentication system, which
can set interval for re-authentication. Switch will start a new authentication at set-up time, if it is
successful user can continue on using Internet, instead user cannot use Internet. About protocol
Internation please refer to Figure 8-5
Advertisement
Table of Contents
