Enterasys Networks 2H253, 2E253, 2H252, 2H258 manual 2 802.1X Port Based Network Access Control

Overview of Security Methods

3.4.2802.1X Port Based Network Access Control

This section provides

•a brief description of 802.1X Port Based Network Access Control,

•definitions of common terms and abbreviations, and

•an overview of the tasks that may be accomplished using the 802.1X and EAP security and authentication features.

When using the physical access characteristics of IEEE 802 LAN infrastructures, the 802.1X standard provides a mechanism for administrators to securely authenticate and grant appropriate access to end user devices directly attached to switch ports. When configured in conjunction with NetSight Policy Manager and Radius server(s), Enterasys Networks’ switchs can dynamically administer user based policy that is specifically tailored to the end user’s needs.

3.4.2.1Definitions of Terms and Abbreviations

Table 3-2provides an explanation of authentication terms and abbreviations used when describing the 802.1X and EAP security and authentication features.

Table 3-2 Authentication Terms and Abbreviations

Term	Definition
EAP	Extensible Authentication Protocol (e.g., Microsoft IAS
	Server and Funk Steel Belted Radius).
PAE	Port Access Entity, device firmware that implements or
	participates in the protocol.
PWA	Port Web Authentication, an enterprise specific
	authentication process using a web browser user-login
	process to gain access to ports.
RADIUS	Remote Authentication Dial In User Service.
Authenticator	The entity that sits between a supplicant and the
	authentication server. The authenticator’s job is to pass
	authenticating information between the supplicant and
	authentication server until an authentication decision is
	made.

Accessing Local Management 3-15