Moxa EDS-510E-3GTXSFP-T [81/105] Ieee 802 x setting

Managed Ethernet Switch (UI_2.0_FW_4.x) Featured Functions

3-68

Client/Supplicant: The end station that requests access to the LAN and switch services and responds to the

requests from the switch.

Authentication Server: The server that performs the actual authentication of the supplicant.

Authenticator: Edge switch or wireless access point that acts as a proxy between the supplicant and the

authentication server, requesting identity information from the supplicant, verifying the information with the

authentication server, and relaying a response to the supplicant.

The Moxa switch acts as an authenticator in the 802.1X environment. A supplicant and an authenticator

exchange EAPOL (Extensible Authentication Protocol over LAN) frames with each other. We can either use an

external RADIUS server as the authentication server, or implement the authentication server in the Moxa

switch by using a Local User Database as the authentication look-up table. When we use an external RADIUS

server as the authentication server, the authenticator and the authentication server exchange EAP frames.

Authentication can be initiated either by the supplicant or the authenticator. When the supplicant initiates the

authentication process, it sends an EAPOL-Start frame to the authenticator. When the authenticator initiates

the authentication process or when it receives an EAPOL Start frame, it sends an EAP Request/Identity

frame to ask for the username of the supplicant.

IEEE 802.1X Setting

Authentication Option

Setting Description Factory Default

Local

(Max. of 32 users)

Select this option when setting the Local User Database

as the

authentication database.

Local

Radius Select this option to set an external RADIUS server as the

authentication database. The authentication mechanism is

EAP-MD5.

Radius, Local Select this option to make using an external RADIUS server as

the authentication database the first priority. The

authentication mechanism is EAP-MD5. The first priority is to

set the Local User Database as the authentication database.

Re-Auth (Global)

Setting Description Factory Default

Enable/Disable Select enable to require re-authentication of the client after a

preset time period of no activity has elapsed.

Enable