Manuals / Brands / Computer Equipment / Switch / Planet Technology / Computer Equipment / Switch

Planet Technology WSW-2401 APPENDIX B, B.1 802.1X Infrastructure, B.2 RADIUS Server Setup, Supplicant:, Authenticator:, RADIUS Server Setup:, B.2.2 Setup Procedure

1 78

Download 78 pages, 4.34 Mb

APPENDIX B

WSW-2401 is with IEEE802.1x authentication capability, before you turn on the 802.1x function, the following sections shows the required environment for 802.1.

Section B.1 describes the infrastructure of the IEEE802.1x

Section B.2 describes how to setup the IEEE802.1x server base on Windows 2000 server. Section B.3. shows how to setup and enable the IEEE802.1x client in your workstation,

example on Windows XP.

B.1 802.1X Infrastructure

1.An 802.1X Infrastructure is composed of three major components: Authenticator, Authentication server, and Supplicant.

Authentication server: An entity that provides an authentication service to an authenticator. This service determines, from the credentials provided by the supplicant, whether the supplicant is authorized to access the services provided by the authenticator.

Authenticator: An entity at one end of a point-to-point LAN segment that facilitates authentication of the entity attached to the other end of that link.

Supplicant: An entity at one end of a point-to-point LAN segment that is being authenticated by an authenticator attached to the other end of that link.

2.In the following sections, we will guide you to build an 802.1X Infrastructure step by step.

RADIUS Server Setup: Microsoft Windows 2000 server.

Authenticator Setup: WSW-2401 (see 3.6.5 or 4.4-12)Switch Client Setup: Microsoft Windows XP.

B.2 RADIUS Server Setup

B.2.1 Required Services

1.After Windows 2000 server has been installed, please install Service Pack 2 also and other latest security patch.

2.Furthermore, the following service components are needed:

3.Active Directory (Please consult with your network administrator or an engineer who is familiar with Windows 2000 server to install Active Directory; otherwise your system or network might be unstable.)

4.IAS (Internet Authentication Service)

5.Web Server (IIS)

6.Certificate Service

B.2.2 Setup Procedure

1.Login into Windows 2000 Server as Administrator, or account that has Administrator authority.

2.Go to Start > Control Panel, and double-click “Add or Remove Programs”.

57

Contents

24 Ports + 1 slot Managed Ethernet Switch WSW-2401 User’s Manual Trademarks Revision TABLE OF CONTENTS CHAPTER 3 CONSOLE AND TELNET MANAGEMENT CHAPTER 6 TECHNICAL SPECIFICATION APPENDIX B Page Chapter 1 Introduction 1.1 Checklist 1.2 About the Switch 1.3 Product Feature Chapter 2 HARDWARE INSTALLATION 2.1 Font Panel FDX/COL 10/100Mbps Ethernet ports 100Base-FXModule (Optional) Console ports Hyper Terminal 2.2 Rear Panel 2.3 Hardware installation Module installation Chapter 3 Console and Telnet Management 3.1 connect To PC by RS-232cable 3.2 Telnet 3.3 Main Menu 3.4 Status and Counters 3.4-1Port Status 3.4-2Port Counters 3.4-3System Information 3.5 Switch Configuration 3.5-1Administration Configuration 3.5-1-1Device Information 3.5-1-2IP Configuration 3.5-1-3User Name Configuration Page 3.5-1-4Password Configuration 3.5-2Port configuration 3.5-3Trunk Configuration 3.5-4Port Mirroring Configuration 3.5-5VLAN Configuration 3.5-5-1VLAN configure 3.5-5-2Create VLAN Group 3.5-5-3Edit/Delete VLAN Group 3.5-5-4Group Stored Mode 3.5-5-5Previous Menu 3.5-6Priority Configuration 3.5-7MAC Address Configuration 3.5-7-1Static MAC Address 3.5-7-2Filtering MAC Address 3.5-7-3Previous Menu 3.5-8Misc Configuration 3.5-9Main Menu 3.6 Protocol Related Configuration 3.6-1STP Configuration 3.6-1-1STP setup 3.6-1-2System Configuration 3.6-1-3Per Port Setting 3.6-1-4Previous Menu 3.6-2SNMP Configuration 3.6-2-1System Options 3.6-2-2Community Strings 3.6-2-3Trap Managers 3.6-3LACP Configuration 3.6-3-1Working Ports 3.6-3-2State Activity 3.6-3-3Group Status 3.6-3-4Previous Menu 3.6-4IGMP/GVRP Configuration 3.6-5802.1X Configuration 3.6-5-1802.1x Setup 3.6-5-2System Configuration 3.6-5-3Per Port Setting 3.6-5-4Misc Configuration 3.6-5-5Previous Menu 3.7 System Reset Configuration 3.7-1Factory Default 3.7-2System Reboot 3.7-3TFTP Configuration 3.7-3-1Update Firmware 3.7-3-2Restore Configuration 3.7-3-3Backup Configuration 3.8 Logout Chapter 4 WEB MANAGEMENT 4.1 login into switch 4.2 Port Status 4.3 Port Statistics 4.4 Administrator 4.4-1IP Configuration 4.4-2Switch Settings 4.4-2-1Basic 4.4-2-2Advanced 4.4-2-3Misc Config 4.4-3Console port Information 4.4-4Port Controls 4.4-5Trunking 4.4-5-1Aggregator Setting 4.4-5-2Aggregator Information 4.4-5-3State Activity 4.4-6Forwarding and Filtering 4.4-6-1IGMP Snooping 4.4-6-2Static MAC Addresses 4.4-6-3MAC Filtering 4.4-7VLAN Configuration 4.4-7-1IEEE802.1Q ØSelect 802.1Q mode from VLAN Operation Mode Enable GVRP Protocol Next 4.4-7-2 Port-basedVLAN 4.4-7-3Port VLAN ID 4.4-8Spanning Tree 4.4-8-2Per Port configuration 4.4-9Port Mirroring 4.4-10SNMP Management 4.4-11Security Manager 4.4-12802.1x configuration 4.4-12-1System Configuration 4.4-12-2Per Port Configuration 4.4-12-3Misc Configuration 4.4-13TFTP Update Firmware 4.4-14Configuration Backup 4.4-14-1TFTP Restore Configuration 4.4-14-2TFTP Backup Configuration 4.4-15Factory Default 4.4-16System Reboot Chapter 5 TROUBLESHOOTING Chapter 6 TECHNICAL SPECIFICATION APPENDIX A A.1 Switch‘s RJ-45Pin Assignments A.2 10/100Mbps, 10/100Base-TX A.3 RJ-45cable pin assignment APPENDIX B B.1 802.1X Infrastructure B.2 RADIUS Server Setup Page Authenticated Session Smartcard Logon Properties Page Finish Start > Run command 20.Type “secedit/refreshpolicy machine_policy” to refresh policy Page Client address Client-Vendor Shared secret Confirmed shared secret 27.Click “Finish” 29.Select “New Remote Access Policy” Day-And-Time-Restriction Page Page Page Page Page Dial-in Allow access Call-back B.3 Switch client setup