SGS-6341-Series User Manual

When unauthenticated
, no message from supplicant systems is allowed to be received.
 The controlled and uncontrolled ports are two parts of one port, which means each frame
reaching this port is visible on both the controlled and uncontrolled ports.
3. Controlled direction
In unauthenticated status, controlled ports can be set as unidirectional controlled or
bi-directionally controlled.
 When the port is bi-directionally controlled, the sending and receiving of all frames is
forbidden.
 When the port is unidirectional controlled, no frames can be received from the supplicant
systems while sending frames to the supplicant systems is allowed.
Notes: At present, this kind of switch only supports unidirectional control.
42.1.2 The Work Mechanism of 802.1x
IEEE 802.1x authentication system uses EAP (Extensible Authentication Protocol) to
implement exchange of authentication information between the supplicant system,
authenticator system and authentication server system.
Figure 42-2: the Work Mechanism of 802.1x
 EAP messages adopt EAPOL encapsulation format between the PAE of the supplicant
system and the PAE of the authenticator system in the environment of LAN.
 Between the PAE of the authenticator system and the RADIUS server, there are two
methods to exchange information: one method is that EAP messages adopt EAPOR
(EAP over RADIUS) encapsulation format in RADIUS protocol; the other is that EAP
messages terminate with the PAE of the authenticator system, and adopt the messages
containing RAP (Password Authentication Protocol) or CHAP (Challenge Handshake
Authentication Protocol) attributes to do the authentication interaction with the RADIUS
server.
 When the user pass the authentication, the authentication server system will send the
relative information of the user to authenticator system, the PAE of the authenticator
system will decide the authenticated/unauthenticated status of the controlled port
according to the authentication result of the RADIUS server.
42-73
User’s Manual of SGS-6341 series