Table 35. Supplicant support by port type
Supplicant
The following considerations apply:
A single port can not be configured as both an Authenticator and Supplicant at
■
the same time.
Only one port per AP can be configured as a Supplicant.
■
If the AP is connecting to a switch port with 802.1X authentication enabled, the
■
AP's port type should be configured as a Trunk Port and its role should be
configured as Supplicant. The switch port should be configured as a Trunk port in
Port-based Authenticator mode.
If there are multiple devices connected to an AP port (through a downstream
■
switch), the port can be configured as either Port-based or MAC-based Authen-
ticator. In Port-based mode, only one of the attached MAC hosts must be
authorized for all hosts to be granted access to the network. In MAC-based mode,
each MAC host is individually authenticated.
If a Trunk Port is configured as a Supplicant, a user name and password must be
■
entered to authenticate the port to the 802.1X aware LAN switch.
If an Access Port is configured as an Authenticator, the administrator must define
■
the RADIUS server that the Authenticator will communicate with. All Ethernet ports
of a single AP are configured with the same RADIUS server.
Enable MAC authentication bypass: If MAC authentication bypass is enabled, the
port first attempts to authenticate the attached device by MAC address, and if that
fails, it will try to authenticate the device using 802.1X.
Configuring Hotspot Service
Hotspot service can be deployed on standalone ZoneFlex APs through the Web
interface. At a minimum, you must configure a login redirect URL and a RADIUS server
to which users will be authenticated. Additional options and controls are provided on
subsequent pages.
To enable Hotspot service
1. Go to Configuration > Hotspot.
2. Click Enabled next to Hotspot Service.
3. Review the settings in table
Trunk Port
Access Port
X
Table
36, and make changes as needed.
Configuring the Access Point
Configuring Hotspot Service
General Port
97