АМАТЕК AN-SGM28P24-400 [168/322] Eleventh chapters

167 / 322

Eleventh chapters

AAA configuration

This chapter describes how to configure the 802.1x and RADIUS of switches to prevent

unauthorized users from accessing the network. For the use of the 802.1x client and HyperBoss,

see the respective operating manuals. The main contents of this chapter are as follows：

 802.1x introduce

 RADIUS introduce

 Configuring 802.1x

 configuration RADIUS

AAA is the abbreviation of authentication, authorization and Authentication (Authorization,

and, Accounting). It provides a consistent framework for configuring authentication, authorization,

and billing for these three security functions. The configuration of AAA is actually a management

of network security, where network security mainly refers to access control. Which users can

access the network? What services can users get access to? How to account for the users who are

using the network resources?

Authentication (Authentication): verify whether the user can access access。

Authorization (Authorization): what services can authorized users use?。

Accounting (Accounting): recording the user's use of network resources。

network company launched a set of AAA solutions, the product has 802.1x client, a variety

of supporting authentication switches and authentication billing system HyperBoss. The 802.1x

client is installed on the PC which users access to the Internet. When the user needs to access the

network, it needs to use the 802.1x client to authenticate. Only the authenticated user can use the

network。

is an authentication exchange, which receives the authentication request of client, transfers

the username and password to the authentication and billing system HyperBoss, and the switch