D-Link DGS-3700 User Manual download pdf (Page 167)

DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual

156

connected to a port on the Switch must be authenticated by the Authentication Server (RADIUS) before attaining any

services offered by the Switch on the LAN. The role of the Authentication Server is to certify the identity of the Client

attempting to access the network by exchanging secure information between the RADIUS server and the Client

through EAPOL packets and, in turn, informs the Switch whether or not the Client is granted access to the LAN and/or

switches services.

Figure 5 - 16 The Authentication Server

Authenticator

The Authenticator (the Switch) is an intermediary between the Authentication Server and the Client. The Authenticator

serves two purposes when utilizing the 802.1X function. The first purpose is to request certification information from

the Client through EAPOL packets, which is the only information allowed to pass through the Authenticator before

access is granted to the Client. The second purpose of the Authenticator is to verify the information gathered from the

Client with the Authentication Server, and to then relay that information back to the Client.

Three steps must be implemented on the Switch to properly configure the Authenticator.

1. The 802.1X State must be Enabled. (Security / 802.1X / 802.1X Global settings)

2. The 802.1X settings must be implemented by port (Security / 802.1X / 802.1X Port Settings)

3. A RADIUS server must be configured on the Switch. (Security / 802.1X / Authentication RADIUS Server)

Figure 5 - 17 The Authenticator

1 2 ... 162 163 164 165 166 167 168 169 170 171 172 ... 291 292

No comments

D-Link DGS-3700 User Manual Page 167