AirLive SNMP-FSH2602MG User’s Manual
48
Authenticator
: The authenticator is the device between the client and the Radius
server. It is typically an AP or switch. When a client needs to access certain service, the
authenticator will forward the request to the authentication server and wait for the
authentication server to approve or deny service to the supplicant. Once authenticated,
supplicant can gain access through the authenticator.
Authentication Server
: The 802.1x authentication server is typically the Radius server.
The Radius server will utilize a server port and an account port for authentication and
accounting purpose. These allow the server to keep track of the supplicant’s usage and
grant access based on the accounting information. The Radius server will analyze the
supplicant’s authentication information and decide what level of service the supplicant is
allowed. Then, it will pass this information to the authenticator for execution.
The SNMP-FSH2602MG has full 802.1x authenticator capability. Therefore, even if your
Access Point is not 802.1x ready, the switch can still provide the function if the AP is
connected to the switch. The switch provides both server and accounting port to the Radius
server. It also allows users to define traffic for certain ports to be fully authorized or never
authorized. Its implementation is far more complete than most APs or switches in the
industry.
Application
Hotspot provider:
Wireless ISP installs Access Point in airport, café, and many public areas.
They charge customer based on the usage. 802.1x gives service provider a feasible way for
authentication. With the SNMP-FSH2602MG switch, the APs do not have to support 802.1x.
The authenticator function will be handled by the switch.
Hotel
: Hotel can charge their customer base on usage of internet service through the
802.1x protocol.
802.1x Configuration
(Administrator menu)
Before you can set up the 802.1x configuration, you have to enable the 802.1x control by
going to “
Administrator -> Switch Settings -> Advanced
” to enable the 802.1x protocol.
The option is on the bottom of the page.
System Configuration
802.1x makes use of the physical access characteristics of IEEE802 LAN infrastructures in
order to provide a means of authenticating and authorizing devices attached to a LAN port
that has point-to-point connection characteristics, and of preventing access to that port in
cases in which the authentication and authorization process fails.
