Specifications

Why Would I Use It in My Network?

April 15, 2011 Page 2 of 36

• ConvergenceEndPoint(CEP)

•RADIUSSnooping

Enterasysswitchproductssupporttheconfigurationofuptothreesimultaneousauthentication

methodsperuser,withasingleauthenticationmethodappliedbaseduponMultiAuth

authenticationprecedence.

Why Would I Use It in My Network?

Networkresourcesrepresentamajorcapitalinvestmentforyourorganizationandcanbe

vulnerabletobothundesiredresourceusageandmaliciousintentfromoutsideusers.

Authenticationprovidesyouwithauservalidationfunctionwhichassuresthatthesupplicant

requestingaccesshastherighttodosoandisaknownentity.

Tothe degreeasupplicantisnota

knownentity,accesscanbedeniedorgrantedonalimitedbasis.Theabilityofauthenticationto

bothvalidateauser’sidentityanddefinetheresourcesavailabletotheuserassuresthatvaluable

networkresourcesarebeingusedfor thepurposesintended

bythenetworkadministrator.

How Can I Implement User Authentication?

Takethefollowingstepstoimplementuserauthentication:

• Determinethetypesofdevicestobeauthenticated.

• Determinethecorrectauthenticationtypeforeachdevice.

• Determineanappropriatepolicybestsuitedfortheuseofthatdeviceonyournetwork.

• ConfigureRADIUSuseraccountsontheauthenticationserverforeachdevice.

• Configureuserauthentication.

Authentication Overview

Note: The RADIUS Snooping user authentication feature is detailed in the Configuring RADIUS

Snooping feature guide. The RADIUS Snooping feature guide can be found at:

https://extranet.enterasys.com/downloads.

Note: See the Enterasys Matrix X Core Router Configuration Guide for X-Series switch

authentication configuration information.

For information about... Refer to page...

IEEE 802.1x Using EAP 3

MAC-Based Authentication (MAC) 3

Port Web Authentication (PWA) 3

Convergence End Point (CEP) 4

Multi-User And MultiAuth Authentication 4

Remote Authentication Dial-In Service (RADIUS) 8