Reference Guide

Figure 5. EAP Over RADIUS

RADIUS Attributes for 802.1 Support

Dell Networking systems include the following RADIUS attributes in all 802.1X-triggered Access-Request messages:

Attribute 31 Calling-station-id: relays the supplicant MAC address to the authentication server.

Attribute 41 NAS-Port-Type: NAS-port physical port type. 15 indicates Ethernet.

Attribute 61 NAS-Port: the physical port number by which the authenticator is connected to the supplicant.

Attribute 81 Tunnel-Private-Group-ID: associate a tunneled session with a particular group of users.

Configuring 802.1X

Configuring 802.1X on a port is a one-step process.

For more information, refer to Enabling 802.1X.

Related Configuration Tasks

● Configuring Request Identity Re-Transmissions

● Forcibly Authorizing or Unauthorizing a Port

● Re-Authenticating a Port

● Configuring Timeouts

● Configuring a Guest VLAN

● Configuring an Authentication-Fail VLAN

Important Points to Remember

● The system supports 802.1X with EAP-MD5, EAP-OTP, EAP-TLS, EAP-TTLS, PEAPv0, PEAPv1, and MS-CHAPv2 with

PEAP.

● All platforms support only RADIUS as the authentication server.

● If the primary RADIUS server becomes unresponsive, the authenticator begins using a secondary RADIUS server, if

configured.

● 802.1X is not supported on port-channels or port-channel members.

802.1X