Mac-Based Network Access Control - D-Link xStack DGS-3324SRi User Manual

xStack DGS/DXS-3300 Series Layer 3 Stackable Gigabit Ethernet Switch User Manual

MAC-Based Network Access Control

RADIUS
Server
Ethernet Switch
...
802.1X 802.1X 802.1X
802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X 802.1X
Client Client Client
Client Client Client Client Client Client Client Client Client
Network access controlled port
Network access uncontrolled port
Figure 6- 101. Example of Typical MAC-Based Configuration
In order to successfully make use of 802.1X in a shared media LAN segment, it would be necessary to create "logical"
Ports, one for each attached device that required access to the LAN. The Switch would regard the single physical Port
connecting it to the shared media segment as consisting of a number of distinct logical Ports, each logical Port being
independently controlled from the point of view of EAPOL exchanges and authorization state. The Switch learns each
attached devices' individual MAC addresses, and effectively creates a logical Port that the attached device can then use to
communicate with the LAN via the Switch.
137