User Manual

Authentication server

C

Fig. 3-54

Authenticator

B

Supplicant A

The Fig. 3-55 shows the procedure of 802.1X authentication. There are steps for the login based on 802.1X port access control management. The protocol used in the right side is EAPOL and the left side is EAP.

1.At the initial stage, the supplicant A is unauthenticated and a port on switch acting as an authenticator is in unauthorized state. So the access is blocked in this stage.

2.Initiating a session. Either authenticator or supplicant can initiate the message exchange. If supplicant initiates the process, it sends EAPOL-start packet to the authenticator PAE and authenticator will immediately respond EAP-Request/Identity packet.

3.The authenticator always periodically sends EAP-Request/Identity to the supplicant for requesting the identity it wants to be authenticated.

4.If the authenticator doesn’t send EAP-Request/Identity, the supplicant will initiate EAPOL-Start the process by sending to the authenticator.

5.And next, the Supplicant replies an EAP-Response/Identity to the authenticator. The authenticator will embed the user ID into Radius- Access-Request command and send it to the authentication server for confirming its identity.

6.After receiving the Radius-Access-Request, the authentication server sends Radius-Access-Challenge to the supplicant for asking for inputting user password via the authenticator PAE.

7.The supplicant will convert user password into the credential information, perhaps, in MD5 format and replies an EAP-Response with this credential information as well as the specified authentication algorithm (MD5 or OTP) to Authentication server via the authenticator PAE. As per the value of the type field in message PDU, the authentication server knows which algorithm should be applied to authenticate the credential information, EAP-MD5 (Message Digest 5) or EAP-OTP (One Time Password) or other else algorithm.

Publication date: January, 2006

Revision A2

116

Page 123 Page 125
Page 124
Image 124
KTI Networks KGS-2416 user manual 116
Page 123 Page 125

KGS-2416 specifications

KTI Networks KGS-2416 is a sophisticated Ethernet switch designed to meet the demands of modern networking environments. This device is particularly ideal for enterprises requiring robust performance for an expanding network infrastructure. With 24 10/100/1000Base-T ports and 2 gigabit SFP (Small Form-factor Pluggable) uplink ports, the KGS-2416 provides ample connectivity options suitable for a variety of applications, including servers, workstations, and other network devices.

One of the standout features of the KGS-2416 is its support for Layer 2 switching, which enhances data traffic management by enabling the configuration of VLANs (Virtual Local Area Networks). This capability allows network administrators to segment traffic and improve overall network performance and security. The switch supports IEEE 802.1Q VLAN tagging, allowing for up to 4096 VLANs to be configured, thus ensuring flexible network design and management.

Additionally, the KGS-2416 supports advanced traffic management features such as Quality of Service (QoS). This technology prioritizes critical network traffic, ensuring smooth and uninterrupted service for voice, video, and data applications. With support for multiple QoS standards, administrators can tailor the performance of their networks based on their specific needs.

Power over Ethernet (PoE) capability is another significant feature of the KGS-2416, allowing users to deliver both data and power over a single Ethernet cable to powered devices. This capability simplifies wiring and reduces the need for additional power supplies, making it an ideal solution for deploying IP cameras, wireless access points, and VoIP phones.

The switch is designed with an intuitive user interface that makes configuration and management hassle-free. It can be managed through both web-based GUI and command-line interface (CLI), providing flexibility for various administrative preferences. Moreover, the device supports SNMP (Simple Network Management Protocol), allowing for seamless integration into existing network management systems.

In terms of reliability, the KGS-2416 boasts features like redundant power supply options and a fanless design for silent operation. This makes it a reliable choice for environments where noise and downtime must be minimized. Overall, the KTI Networks KGS-2416 is an excellent choice for organizations looking for a feature-rich, reliable, and efficient Ethernet switch to power their networking needs.
Top Page Image Contents