Alloy Computer Products POEGEM12T2SFP user manual

POEGEM12T2SFP User Manual

In the Fig. 3-60, this is the typical configuration, a single supplicant, an authenticator and an authentication server. B and C are on the internal network, D is the Authentication server running RADIUS, the switch at the central location acts as the Authenticator connecting to PC A and A is a PC outside the controlled port, running Supplicant PAE. In this case, PC A wants to access the services on device B and C, first, it must exchange the authentication message with the authenticator on the port it is connected via EAPOL packet. The authenticator transfers the supplicant’s credentials to the Authentication server for verification. If successful, the authentication server will tell the authenticator to grant access. PC A is then allowed to access B and C via the switch. If there are two switches directly connected together the link connecting the two switches, may have to act as two port roles at the end of the link: authenticator and supplicant, because the traffic is bi-directional.

Authentication server

C

Authenticator

B

Fig. 3-60 A

Only MultiHost 802.1X authentication is supported in the POEGEM12T2SFP. In this mode devices connected to an 802.1x enabled port, can access network resources once the supplicant has been authenticated.

96

Alloy Computer Products Pty Ltd Copyright ©2006