What You Need To Know; Mac Authentication - ZyXEL Communications GS2220 Series User Manual

• Use the
G ue st Vla n
• Use the
C o m po und Authe ntic a tio n
clients that pass either IEEE 802.1x authentication OR MAC authentication, or pass both IEEE 802.1x
authentication AND MAC authentication.
18.1.2 Wha t Yo u Ne e d to Kno w
IEEE 802.1x Authe ntic a tio n
The following figure illustrates how a client connecting to a IEEE 802.1x authentication enabled port goes
through a validation process. The Switch prompts the client for login information in the form of a user
name and password after the client responds to its identity request. When the client provides the login
credentials, the Switch sends an authentication request to a RADIUS server. The RADIUS server validates
whether this client is allowed access to the port.
Fig ure 153
18.1.3 MAC Authe ntic a tio n
MAC authentication works in a very similar way to IEEE 802.1x authentication. The main difference is that
the Switch does not prompt the client for login credentials. The login credentials are based on the
source MAC address of the client connecting to a port on the Switch along with a password configured
specifically for MAC authentication on the Switch.
screen (Section 18.5 on page
IEEE 802.1x Authentication Process
GS2220 Series User's Guide
199) to enable and assign a guest VLAN to a port.
screen (Section 18.6 on page
195
201) to allow network access for