Edimax Technology ES-5240G+ user manual

Page 70

1.On the initial stage, the supplicant A is unauthenticated and a port on switch acting as an authenticator is in unauthorized state. So the access is blocked in this stage.

2.Initiating a session. Either authenticator or supplicant can initiate the message exchange. If supplicant initiates the process, it sends EAPOL-start packet to the authenticator PAE and authenticator will immediately respond EAP-Request/Identity packet.

3.The authenticator always periodically sends EAP-Request/Identity to the supplicant for requesting the identity it wants to be authenticated.

4.If the authenticator doesn’t send EAP-Request/Identity, the supplicant will initiate EAPOL-Start the process by sending to the authenticator.

5.And next, the Supplicant replies an EAP-Response/Identity to the authenticator. The authenticator will embed the user ID into Radius- Access-Request command and send it to the authentication server for confirming its identity.

6.After receiving the Radius-Access-Request, the authentication server sends Radius-Access-Challenge to the supplicant and asks or user password via the authenticator PAE.

7.The supplicant will convert user password into the credential information, perhaps, in MD5 format and replies an EAP-Response with this credential information as well as the specified authentication algorithm (MD5 or OTP) to Authentication server via the authenticator PAE. As per the value of the type field in message PDU, the authentication server knows which algorithm should be applied to authenticate the credential information, EAP-MD5 (Message Digest 5) or EAP-OTP (One Time Password) or other else algorithm.

8.If the user ID and password is correct, the authentication server will send a Radius-Access-Accept to the authenticator. If not correct, the authentication server will send a Radius-Access-Reject.

9.When the authenticator PAE receives a Radius-Access-Accept, it will send an EAP-Success to the supplicant. At this time, the supplicant is authorized and the port connected to the supplicant and under 802.1x control is in the authorized state. The supplicant and other devices connected to this port can access the network. If the authenticator receives a Radius-Access-Reject, it will send an EAP-Failure to the supplicant. This means the supplicant is failed to authenticate. The port it connects is in the unauthorized state, the supplicant and the devices connected to this port won’t be allowed to access the network.

64

Image 70
Contents ES-5240G+ Port GbE Web Smart Switch Version 1.0 / JuneCopyright Table of Contents 100 Electronic Emission Notices Federal Communications Commission FCC StatementPage Key Features in the Device Overview of 24-Port GbE Web Smart SwitchVlan Hardware ChecklistFeatures ManagementPage View of 24-Port GbE Web Smart Switch User Interfaces on the Front Panel Button, LEDs and PlugsSystem LED LED IndicatorsUser Interfaces on the Rear Panel 10/100/1000Ethernet TP Port 1 to 24 LEDView of the Optional Modules Front View of 1000Base-SX/LX LC, SFP Fiber TransceiverHardware and Cable Installation Starting 24-Port GbE Web Smart Switch UpConnecting the SFP Module to the Chassis Cabling Requirements TP Port and Cable InstallationPower On Firmware LoadingCabling Requirements for TP Ports Cabling Requirements for 1000SX/LX SFP Module1000Base-X TP, Fiber 100Base-TX TP 100Base-FX Fiber Typical Network Topology in DeploymentNo Vlan Configuration Diagram Case 2b Port-based Vlan See -4 Page Managing 24-Port GbE Web Smart Switch through Ethernet Port Management through Ethernet PortLogin Screen for Web IP Address Assignment110 10000000.00000001.00000010.1 Prefix Length No. of IP matched No. of Addressable IP Page Typical Applications 10 Network Connection between Remote Site and Central Site11 Peer-to-peer Network Connection Basic Concept and Management What’s the EthernetIEEE802.3 CSMA/CD MAC STP Bpdu SnapARP Media Access Control MAC SAP FormatPRE SFD FCSPage How does a MAC work? Bytes DTE Flow Control Page Bits How does a switch work? Collision Domain Page Page Virtual LAN Page CFI Tag FormatPage Page How does a Tagged Vlan work? VIDLink Aggregation 10 Example of Link Aggregation Application Operation of Web-based Management Web Management Home Overview Information of Page Layout Lacp Rstp SnmpSystem Configuration Function descriptionPage Page Port Configuration ON/OFFVlan Mode Configuration Port ConfigurationSelect Vlan Mode Vlan Group Configuration VIDAdd or Remove Vlan Member 10 Aggregation/Trunking Configuration Aggregation11 Lacp Port Configuration LacpRstp Rstp Port Configuration Page Page Page Port Mode Port Control Authentication Port Status Radius IP 16 802.1X Configuration 802.1x Parameters Igmp Snooping Vlan IDMirror Configuration 20 Mirror ports configurationQoSQuality of Service Configuration 21 QoS ConfigurationQoS Configuration Dscp Setting Filter Dhcp24 Filter Configuration 25 Rate Limit Configuration Rate Limit26 Storm Control Configuration Storm ControlParameter description Snmp Parameters description27 Snmp Configuration Monitoring Statistics Overview 28 Statistics Overview for all portsDetailed Statistics Page Page 29 Detailed Statistics for each port Lacp Status 30 Lacp StatusRstp Status 31 Rstp Status Igmp Status 32 Igmp Status Ping Status 33 Ping Maintenance Warm Restart 34 Warm RestartFactory Default Software Upgrade 36 Software UpgradeConfiguration File Transfer Function descriptionLogout Resolving No Link Condition Q&AAppendix a Technical Specifications ƒ MAC Address and Self-learning 8K MAC address ƒ Network InterfaceSFP ƒ Cable and Maximum LengthAmbient Temperature ƒ Diagnostic LEDƒ Power Requirement DimensionsManagement Software Specifications From RFC1155-SMI PRIVATE-ES-5240G+-MIB Definitions = Begin ImportsFrom RFC1213-MIB OBJECT-TYPE

ES-5240G+ specifications

Edimax Technology ES-5240G+ is a highly versatile and efficient Ethernet switch designed to cater to the networking needs of small to medium-sized businesses and home offices. With its robust features and reliable performance, this switch is an essential component for a seamless network infrastructure.

One of the standout features of the ES-5240G+ is its 24 10/100/1000Mbps Gigabit Ethernet ports. This allows for high-speed connectivity, enabling users to transfer large files quickly and efficiently. The switch is equipped with a non-blocking architecture, ensuring that all ports can be utilized simultaneously without any reduction in bandwidth. This is particularly beneficial for businesses that rely on high-speed internet and internal networks for their daily operations.

The ES-5240G+ supports advanced Layer 2 switching features, including VLAN (Virtual Local Area Network) support, port mirroring, and link aggregation. These features enhance network management and optimization, making it easier to segment network traffic and improve security. With VLAN support, users can create separate networks within the same switch, leading to improved performance and reduced broadcast traffic.

Moreover, the ES-5240G+ incorporates IEEE 802.3x Flow Control, which helps to prevent data loss during heavy traffic periods. This technology allows for effective communication between devices and ensures smooth data transmission, even in congested network environments. Additionally, the switch is equipped with Automatic MDI/MDI-X detection, eliminating the need for crossover cables and simplifying installation.

From a security perspective, Edimax has included features such as address filtering and port security, which help to protect the network from unauthorized access. The switch can restrict access to specific MAC addresses, providing an added layer of security for sensitive data.

In terms of energy efficiency, the ES-5240G+ is designed to comply with IEEE 802.3az Energy Efficient Ethernet standards. This technology helps to reduce power consumption during low-traffic periods, making it an eco-friendly choice for businesses looking to minimize their carbon footprint.

Overall, Edimax Technology ES-5240G+ stands out as a reliable and efficient Ethernet switch, equipped with a range of features that enhance network performance and security. Its capabilities make it an ideal choice for businesses seeking to streamline their networking infrastructure and improve operational efficiency.