АМАТЕК AN-SGM28P24-400 [169/322] 802 x introduce

168 / 322

itself doesn't do the actual authentication work. HyperBoss receives the authentication request sent

by the switch and carries out the actual authentication, and carries on the billing processing to the

successful authentication user。

The 802.1x protocol is used between the 802.1x client and the switch to communicate, and

the RADIUS protocol is used between the switch and the HyperBoss。

11.1 802.1x introduce

The 802.1x protocol is based on access control and authentication protocol port, the port is

here refers to the logical port, can be a physical port, MAC address or Vlan ID, network switch

realization is based on MAC address and port based on 802.1x Protocol。

802.1x is a two layer protocol, the authenticated switch and the user's PC must be in the same

subnet, and the protocol packet cannot cross the network segment. 802.1x authentication uses the

model of client server, and must have a server to authenticate all users。

In MAC mode, the user through the authentication before, only authentication flow can

through the switch port, after succeeding in authentication, data can flow through the switch port,

which means that users must access the network after the adoption of the certification to. Port

mode, you can open the Guest Vlan function, the default is closed. Turn off Guest Vlan, and MAC

data through the same pattern, but after authentication is to open the port, not registered MAC

address; open the Guest Vlan when the user is authenticated before data by Guest Vlan, the

authentication succeeds, by Auth Vlan, this method can be used to specify the scope of limited

access limited user authentication before, after the public network access authentication。

The main contents of this section are as follows：

 802.1x device composition

 Brief introduction of protocol package

 Protocol flow interaction

 802.1x port state