D-Link DGS-3024 [79/184] D link des 3350sr standalone layer 3 switch

Превью страниц Страница 79 / 184

D-Link DES-3350SR Standalone Layer 3 Switch

Authentication Server

The Authentication Server is a remote device that is connected to the same network as the Client and Authenticator, must be

running a RADIUS Server program and must be configured properly on the Authenticator (Switch). Clients connected to a port on

the Switch must be authenticated by the Authentication Server (RADIUS) before attaining any services offered by the Switch on

the LAN. The role of the Authentication Server is to certify the identity of the Client attempting to access the network by

exchanging secure information between the RADIUS server and the Client through EAPOL packets and, in turn, informs the

Switch whether or not the Client is granted access to the LAN and/or switches services.

Figure 7 - 55. The Authentication Server

Authenticator

The Authenticator (the Switch) is an intermediary between the Authentication Server and the Client. The Authenticator servers two

purposes when utilizing 802.1x. The first purpose is to request certification information from the Client through EAPOL packets,

which is the only information allowed to pass through the Authenticator before access is granted to the Client. The second purpose

of the Authenticator is to verify the information gathered from the Client with the Authentication Server, and to then relay that

information back to the Client.

Three steps must be implemented on the Switch to properly configure the Authenticator.

1. The 802.1x State must be Enabled. (Configuration / Advanced Settings)

2. The 802.1x settings must be implemented by port (Configuration / Port Access Entity / Configure Authenticator)

3. A RADIUS server must be configured on the Switch. (Configuration / Port Access Entity / RADIUS Server)

Figure 7 - 56. The Authenticator

Client

The Client is simply the endstation that wishes to gain access to the LAN or switch services. All endstations must be running

software that is compliant with the 802.1x protocol. For users running Windows XP, that software is included within the operating

system. All other users are required to attain 802.1x client software from an outside source. The Client will request access to the

LAN and or Switch through EAPOL packets and, in turn will respond to requests from the Switch.