Lancom GS-1224P Manual page 41

LANCOM GS-1224 and LANCOM GS-1224P
Chapter 4: Operation of Web- based Management
In the following figure is the typical configuration, a single supplicant, an
authenticator and an authentication server. B and C are in the internal net-
work, D is the authentication server running RADIUS, the switch at the central
location acts as an Authenticator connected to PC A and A is a PC outside the
controlled port, running Supplicant PAE. In this case, PC A wants to access the
services on device B and C, first, it must exchange the authentication message
with the authenticator on the port it connected via EAPOL packet. The
authenticator transfers the supplicant's credentials to the authentication ser-
ver for verification. If successuf, the authentication server will inform the
authenticator about the granted access. Then, PC A is allowed to access B and
C via the switch. If there are two switches directly connected together instead
of a single one, for the link connecting the two switches, it may have to act in
two port roles at the end of the link: authenticator and supplicant, because
the traffic is bi-directional.
40