Allied Telesis SwitchBlade x3100 Series Manual page 658

Release 14.2 - issue 2
Table of Contents

Advertisement

Introduction
In release 14.2, only Single Host mode is supported.
Note:
6.9.1.1 Protocols for 802.1X
For port authentication, two protocols are used;:
EAPoL (Extensible Authentication Protocol over LAN) - This is used for carrying EAP messages between
the Supplicant and the Authenticator over a LAN. EAPoL is defined in the 802.1X Standard. EAP is defined
in RFC 3748 and there are various EAP methods that it supports for authentication, each with varying
degrees of security. For 802.1X, EAP is used between the Supplicant and the Authentication Server and is
transparent to the Authenticator.
For 802.1X, the SBx3112 has been verified to work transparently with EAP-MD5, EAP-PEAP, EAP-TLS
Note:
and EAP-TTLS, but not verified for transparency to other methods, such as EAP-OTP.
RADIUS - This is exchanged between the Authenticator and Authentication server.
6.9.1.2 RADIUS Configuration
An overview of RADIUS is provided in Section 6.8. With Port Authentication, a RADIUS server (or multiple
RADIUS servers) can be used for 802.1X Authentication.
The commands that provide this are
Note:
14.2, only the types LOGIN and 802.1X are allowed.
6-98
Software Reference for SwitchBlade x3100 Series Switches (Access and Security)
ADD RADIUS SERVER (SEC)
Introduction
and
SET RADIUS SERVER
(SEC). In

Advertisement

Table of Contents
loading

Table of Contents