АМАТЕК AN-SGM28P24-400 [170/322] 802 x device composition

169 / 322

11.1.1 802.1x device composition

802.1x device consists of three parts: client (Supplicant System), authentication system

(Authenticator System) and authentication server (Authentication Server System). As shown in the

following picture。

802.1x

Refers to the client requests access to network equipment, general user terminal system, such

as PC users, the user terminal system must install a 802.1x client software, the software realization

of 802.1x protocol in the client part. The client initiates the 802.1x authentication request and

requests the authentication server to verify its user name and password. If the authentication is

successful, the user can access the network。

Authentication systems refer to authenticated devices, such as switches. The user

authentication system by logical port (refer to the MAC address) state control whether a user can

access the network, if the user is non logical port state authority, the user can not access the

network, if the user is authorized to logical port state, the user can access the network。

Authentication system is a relay between the client and the authentication server. The

authentication system requests the identity information of the user, and forwards the identity

information of the user to the authentication server, and forwards the authentication result sent by

the authentication server to the client. The server part authentication system to implement the

802.1x protocol in the near end users, the client part near the authentication server to implement

the RADIUS protocol, RADIUS protocol client authentication system 802.1x client sent EAP

information package sent to the authentication server in RADIUS, and from the authentication