H3C S7500 Series Ethernet Switches Operation Manual

Operation Manual – 802.1x
H3C S7500 Series Ethernet Switches Chapter 1
802.1x Configuration
1-1
Chapter 1 802.1x Configuration
When configuring 802.1x, go to these sections for information you are interested in:
z Introduction to 802.1x
z 802.1x Configuration
z Basic 802.1x Configuration
z Timer and Maximum User Number Configuration
z Advanced 802.1x Configuration
z Displaying and Debugging 802.1x
z Configuration Example
1.1 Introduction to 802.1x
The 802.1x protocol (802.1x for short) was developed by IEEE802 LAN/WAN
committee to address security issues of wireless LANs. It was then used in Ethernet as
a common access control mechanism for LAN ports to address authentication and
security problems.
802.1x is a port-based network access control protocol. It authenticates and controls
devices attempting to access the LAN on the ports of access control devices. A device
attached to a port can access the LAN only when it passes the authentication. Those
failing to pass the authentication are denied, as if they were disconnected from the
LAN.
This section covers these topics:
z Architecture of 802.1x Authentication
z 802.1x Authentication Mechanism
z EAPoL Encapsulation
z 802.1x Authentication Procedure
z 802.1x Timer
z 802.1x Implementation on an S7500 Series Switch
1.1.1 Architecture of 802.1x Authentication
802.1x adopts a client/server architecture with three entities: a supplicant system, an
authenticator system, and an authentication server system, as shown in
Figure 1-1.