Buffalo BSL-PS-G2108M User Manual page 38

Chapter 2 Configuration
Parameter
EAP Extensions
• In ports where MAC authentication was set, when an IP packet is received, the sender MAC address
is used to perform authentication.
Authentication is performed with the RADIUS server by using the sender MAC address as both the
username and the password.
Example: When the IP packet sender MAC address is 11:22:33:44:55:66
Username: 112233445566
Password: 112233445566
A RADIUS request is sent to the RADIUS server using the username and password shown above.
The user must be registered beforehand at the RADIUS server.
• MAC authentication is not started two consecutive times for the same MAC address. If MAC
authentication fails, either disconnect and reconnect the LAN cable, or try authentication again
after performing other authentication.
• The supported encryptions system are shown in the table below.
Authentication
802.1X Port
802.1X MAC
Password
By MAC
• If performing 802.1X MAC authentication, EAPOL-Start must be issued from the supplicant to
start authentication.
• If 802.1X port authentication was performed, MAC address filtering can no longer be used at the
applicable port.
• If PAP was used, re-authentication is not performed.
• In ports where MAC address filtering or trunking is enabled, authentication cannot be selected.
Meaning
Insert a check mark here to disable the authentication function for
all setting ports or to enable received EAP frames to pass through.
Supported Encryption System
802.1X (EAP-MD5, TLS, PEAP)
802.1X (EAP-MD5, TLS, PEAP)
PAP
PAP
Simultaneous Setting
Not allowed
Allowed
Allowed
Allowed
- 37 -