Datasheet
Page 5
Multi-User/Method Authentication and Policy
Authentication allows enterprise organizations to manage network access and provide mobility to users and devices. It provides a way to know who or
what is connected to the network and where this connection is at any time. The Enterasys S- Series has unique, industry leading capabilities regarding
types of simultaneous authentication methods. S-Series modules can support multiple concurrent authentication techniques, including:
• 802.1X authentication
• MAC authentication, which is a way to authenticate devices on the network using the MAC address
• Web-based authentication, also known as Port Web Authentication (PWA), where a user name and password are supplied through a browser
• CEP, also known as Convergence End Point, where multiple vendors VoIP phones are identified and authenticated; this capability provides great
flexibility to enterprises looking to implement access control mechanisms across their infrastructure
A significant additional feature of the S-Series is the capability to support multi-user authentication. This allows multiple users and devices to be
connected to the same physical port and each user or device to be authenticated individually using one of the multi-method options (802.1x, MAC,
PWA, or CEP). The major benefit of multi-user authentication is to authorize multiple users, either using dynamic policy or VLAN assignment for each
authenticated user. In the case of dynamic policy, this is called Multi-User Policy. Multi-user port capacities with the S-Series are determined on a per
port, per I/O module, and per multi-slot system basis. Default I/O module capacities are detailed below.
Muti-user authentication and policy can provide significant benefits to customers by extending security services to users connected to unmanaged
devices, third party switches/routers, VPN concentrators, or wireless LAN access points at the edge of their network. Using authentication provides
security, priority, and bandwidth control are enhanced while protecting existing network investments. The S-Series supports up to 9000 concurrently
authenticated users in a single system.