Specifications
Waters Network Systems User’s Manual Page 81
PS-2126M-POE
supplicant and the devices connected to this port won’t be allowed to access the network.
10. When the supplicant issues an EAP-Logoff message to Authentication server, the active port
being used is set to unauthorized.
Figure 5.45 -802.1x Authentication
The type of authentication supported in the switch is multihost 802.1x. In this mode, once a
supplicant is authorized, the devices connected to this port can access the network resources.
802.1X Port-based Network Access Control function supported by the switch is complex.
Support, by basic multihost mode, can distinguish the device’s MAC address and its VID. The
following table summarizes the combination of the authentication status and the port status
versus the status of port mode, set in 802.1X Port mode, port control state, set in 802.1X port
setting. Entry Authorized means MAC entry is authorized.
Port Mode Port Control Authentication Port Status
Disable Don’t Care Don’t Care Port Uncontrolled
Multihost Auto Successful Port Authorized
Multihost Auto Failure Port Unauthorized
Multihost ForceUnauthorized Don’t Care Port Unauthorized
Multihost ForceAuthorized Don’t Care Port Authorized
Table 5-3
Access allowed
PC
LAN
Bridge
Radius Server
Access blocked
Port connect
Radius-Access-Challenge
Radius-Access-Accept
Radius-Access-Request
Radius-Access-Request
EAPOL-Start
EAP-Response/Identity
EAP-Response (cred)
EAP-Request/Identity
EAP-Request
EAP-Success
EAP-Failure
EAPOL
EAP
Authenticator
Radius
EAP-Logoff