Sentriant Ag And 802.1X; Figure 116:802.1X Components - Extreme Networks AG200 User Manual

802.1X Quarantine Method
7 The AP (authenticator) allows or blocks the client's (supplicant's) access to the network by
controlling which ports are open or closed.
Figure 116: 802.1X Components

Sentriant AG and 802.1X

When configured as 802.1X-enabled, Sentriant AG can be installed with three different configurations
depending on your network environment:
Microsoft IAS and Sentriant AG IAS Plug-in
●
With this method, the switch is configured with the IAS server IP address as the RADIUS server
host. When the switch performs the RADIUS authentication, IAS authenticates the user. If successful,
IAS then calls the Sentriant AG plug-in, which asks Sentriant AG for the health status of the
endpoint. You can configure up to six Sentriant AG server URLs. The plug-in reads the list of servers
over and over (iterates) attempting to connect to one of them. Once a connection is made, the
Sentriant AG plug-in uses that server URL until it is no longer available, at which point it iterates
over the list of servers again. If necessary, the Sentriant AG plug-in overwrites the RADIUS attributes
to specify the VLAN to place the endpoint into. IAS then returns the results to the switch.
228
Sentriant AG Users' Guide, Version 5.0