Chapter 8; Access Service - Zte ZXR10 2920 User Manual

Introduction
Client System
Authentication
System
8
C h a p t e r

Access Service

With the rapid expansion of Ethernet construction scale,
meet fast increase of subscribers and requirement of diversified
broadband services, Network Access Service (NAS) is embedded
on the switch to improve authentication and management of
access subscribers
operation, and management of broadband network.
NAS uses the 802.
the authentication and management of access subscribers.
is highly efficient, safe, and easy to operate.
IEEE 802. 1x is called port-based network access control
protocol. Its protocol system includes three key parts:
Client system is generally a user terminal system installed with
client software.
protocol authentication process through this client software.
To support the port-based network access control, client system
must support Extensible Authentication Protocol Over LAN
(EAPOL).
Authentication system is generally network equipment that
supports IEEE802.
Corresponding to ports of different subscribers (ports could be
physical ports or MAC address,
equipment). Authentication system has two logical ports:
controlled port and uncontrolled port.
Uncontrolled port is always in the state that the bidirectional
connections are available.
frames and can ensure that client can always send or receive
authentication.
Control port is enabled only when authentication is passed.
It is used to transfer network resource and services.
Controlled port can be configured as bidirectional controlled
or input controlled
applications.
this subscriber
authentication system.
Confidential and Proprietary Information of ZTE CORPORATION
and better support
1x protocol and RADIUS protocol to realize
A subscriber originates the IEEE802.
1x protocol,
VLAN,
It is used to transfer EAPOL
to meet requirement
If subscriber authentication is not passed,
cannot visit
billing, security,
for example, switch.
or IP address of user
of different
services provided
to
It
1x
by
159