User's Manual

198
Users Manual of CS-6306R
15.2.7 Configuring Authentication Method for 802.1x Port
The 802.1x authentication can be performed in different methods at different ports. In the default configuration,
the 802.1x authentication adopts the default method.
Run the following command in interface configuration mode to configure the method of the 802.1x
authentication:
Run… To…
dot1x authentication method yyy
Configure the method of the 802.1x
authentication.
15.2.8 Selecting Authentication Type for 802.1x Port
You can select the type for the 802.1x authentication. The 802.1x authentication type determines whether
AAA uses Chap authentication or Eap authentication. Eap authentication supports the md5-challenge mode
and the eap-tls mode. Challenge required by MD5 is generated locally when the Chap authentication is
adopted, while challenge is generated at the authentication server when the eap authentication is adopted.
Each port adopts only one authentication type. The authentication type of global configuration is adopted by
default. Once a port is set to an authentication type, the port will use the authentication type unless you run
the No command to resume the default value.
Eap-tls takes the electronic certificate as the authentication warrant and complies with the handshake rules in
Translation Layer Security (tls). Therefore, high security is guaranteed.
Run the following command in global configuration mode to configure the authentication type:
Run… To…
dot1x authen-type {chap|eap}
Select chap or eap.
Also run the following command in interface configuration mode:
Run… To…
dot1x authentication type
{chap|eap}
Select chap or eap or the configured
authentication type in global mode.
15.2.9 Configuring 802.1x Accounting
The 802.1x authentication and 802.1x accounting can be performed at the same time. It working mechanism
is: after the dot1x authentication is approved, judge whether the accounting function is enabled on the
authentication interface; if the accounting function is enabled, send the accounting request through the AAA
interface; when the AAA module returns successful request response message, the AAA interface can
forward texts.
The accounting can adopt various accounting methods configured in the AAA module. For details, refer to
AAA configuration.
After the beginning of accounting, dot1x periodically sends update message to the server through the AAA
interface for obtaining correct accounting information. According to different AAA configuration, the AAA
module decides whether to send the update message.