LANCOM GS
-
1224 and LANCOM GS
-
1224P
쮿
Chapter 4: Operation of Web- based Management
42
EN
control is in the authorized state. The supplicant and other devices con-
nected to this port can access the network. If the authenticator receives a
RADIUS-Access-Reject, it will send an EAP-Failure to the supplicant. This
means the supplicant has failed to authenticate. The port it is connected
to is in the unauthorized state, the supplicant and the devices connected
to this port won’t be allowed to access the network.
쐅
When the supplicant issues an EAP-Logoff message to the authentication
server, the port used is set to unauthorized.
The 802.1X “enabled” is the type of authentication supported by the switch.
In this mode, the devices connected to this port, once a supplicant is autho-
rized, can access the network resources through this port.
The 802.1x Port-based Network Access Control function supported by the
switch is more complex, it just supports basic Multihost mode, which can dis-
tinguish the device’s MAC address and its VID. The following table is the sum-
mary of the combination of the authentication status and the port status
versus the status of port mode, set in 802.1x Port mode, port control state, set
in 802.1x port setting. Here Entry Authorized means MAC entry is authorized.
Port Mode
Port Control
Authentication
Port Status
Disable
Don’t Care
Don’t Care
Port Uncontrolled
Multihost
Auto
Successful
Port Authorized