Administrator Guide

Dell Networking W-ClearPass Deployment Guide Mobility Access Switch Configuration for 802.1X Authentication | 165
Chapter 6
Mobility Access Switch Configuration for 802.1X Authentication
This chapter describes how to configure an Mobility Access Switch for 802.1X authentication.
This chapter includes the following information:
l Mobility Access Switch Configuration for 802.1X Wired Authentication
l Configuring 802.1X Authentication with Machine Authentication
l CLI-Based Configuration for Mobility Access Switch 802.1X Authentication
Mobility Access Switch Configuration for 802.1X Wired
Authentication
This section describes how to configure the Mobility Access Switch (MAS) for 802.1X wired authentication. This
section contains the following information:
l About Defining Wired 802.1X Authentication
l Configuring Authentication with a RADIUS Server
l Authentication Terminated on the Mobility Access Switch
l Configuring Access Control Lists
About Defining Wired 802.1X Authentication
Port-based 802.1X authentication on the Mobility Access Switch is configured similarly to how it's done on the
mobility controller, the main difference being the AAA profile is applied on a wired interface or interface-group,
as opposed to a Virtual Access Point (VAP) on the mobility controller.
Figure 145 shows the network traffic flow for wired clients that connect to an Dell Mobility Access Switch or a
third-party switch and perform 802.1X authentication to the W-ClearPass Policy Manager server.
Figure 145 Traffic flow for 802.1X Wired Authentication with Active Directory
The configuration process is as follows:
1. Define an external RADIUS server or create an internal database.
2. Define a server group and apply one of the servers above to this server group.
3. Create 802.1X authentication profiles.
4. Apply the server group to each of the 802.1X authentication profiles.
5. Apply the 802.1X authentication profiles to an AAA profile.