Administrator Guide

286 Authentication, Authorization, and Accounting
How Does the Authentication Server Assign DiffServ Policy?
The Dell Networking N-Series switches allow the external 802.1X
Authenticator or RADIUS server to assign DiffServ policies to users that
authenticate to the switch. When a host (supplicant) attempts to connect to
the network through a port, the switch contacts the 802.1X authenticator or
RADIUS server, which then provides information to the switch about which
DiffServ policy to assign the host (supplicant). The application of the policy
is applied to the host after the authentication process has completed. The
Diffserv policy is always applied for the "in" direction of the interface and
applies to the interface as a whole.
RADIUS
Timeout
Default behavior Port State: Deny Port State: Permit
VLAN: Default PVID
of the port
Unauth VLAN
enabled
Port State: Deny Port State: Permit
VLAN: Unauth
EAPOL Timeout Default behavior Port State: Deny Port State: Permit
3 × EAPOL
Timeout
(Guest VLAN
timer expiry or
MAB timer
expiry)
Guest VLAN
enabled
Port State: Permit
VLAN: Guest
Port State: Permit
VLAN: Guest
MAB Success Case Port State: Permit
VLAN: Assigned
Filter: Assigned
Port State: Permit
VLAN: Assigned
Filter: Assigned
MAB Fail Case Port State: Deny Port State: Permit
VLAN: Default PVID
of the port
Supplicant
Timeout
Port State: Deny Port State: Deny
Port/Client
Authenticated
on Guest VLAN
Delete Guest
VLANID through
Dot1Q
Port State: Deny Port State: Permit
VLAN: Default PVID
of the port
Table 10-11. IEEE 802.1X Monitor Mode Behavior (Continued)
Case Sub-case Regular Dot1x Dot1x Monitor Mode