3Com S7906E Configuration Manual page 1874

1 802.1X Configuration·································································································································1-1
802.1X Overview·····································································································································1-1
Architecture of 802.1X ·····················································································································1-2
Authentication Modes of 802.1X ·····································································································1-2
Basic Concepts of 802.1X ···············································································································1-2
EAP over LAN ·································································································································1-3
EAP over RADIUS···························································································································1-5
802.1X Authentication Triggering ····································································································1-5
Authentication Process of 802.1X ···································································································1-6
802.1X Access Control Method·······································································································1-9
802.1X Timers ·································································································································1-9
Features Working Together with 802.1X·······················································································1-10
802.1X Configuration Task List·············································································································1-13
802.1X Basic Configuration ··················································································································1-13
Configuration Prerequisites ···········································································································1-13
Configuring 802.1X Globally··········································································································1-13
Configuring 802.1X for a Port········································································································1-15
Enabling the Online User Handshake Function····················································································1-16
Enabling the Proxy Detection Function·································································································1-16
Enabling the Multicast Trigger Function································································································1-17
Enabling the Unicast Trigger Function··································································································1-17
Specifying a Mandatory Authentication Domain for a Port ···································································1-18
Enabling the Quiet Timer Function ·······································································································1-18
Enabling the Re-Authentication Function······························································································1-18
Configuring a Guest VLAN····················································································································1-19
Configuring an Auth-Fail VLAN·············································································································1-20
Displaying and Maintaining 802.1X·······································································································1-21
802.1X Configuration Example ·············································································································1-21
Guest VLAN and VLAN Assignment Configuration Example ·······························································1-24
ACL Assignment Configuration Example······························································································1-26
2 802.1X-Based EAD Fast Deployment Configuration··············································································2-1
EAD Fast Deployment Overview ············································································································2-1
EAD Fast Deployment Implementation ···························································································2-1
Configuring EAD Fast Deployment ·········································································································2-1
Configuration Prerequisites ·············································································································2-2
Configuration Procedure··················································································································2-2
Displaying and Maintaining EAD Fast Deployment ················································································2-3
EAD Fast Deployment Configuration Example·······················································································2-3
Troubleshooting EAD Fast Deployment··································································································2-5
Users Cannot be Redirected Correctly····························································································2-5
Table of Contents
i