Allied Telesis AT-FS970M Series - Manual (Page 205)

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide
205
An example of this authenticator operating mode is illustrated in
Figure 78. The supplicants are connected to a hub or non-802.1x-
compliant switch which is connected to an authenticator port on the
switch. If the port is configured as 802.1x authenticator, the supplicants
must successfully authenticate before they can forward traffic through
the switch.
Figure 78. Multiple Supplicant Mode
Dynamic VLAN
Assignments
With 802.1x port-based network access control, you can link a username
and password combination or MAC address to a specific VLAN so that the
switch automatically moves the port to the appropriate VLAN when a
supplicant logs on. This frees the network manager from having to
reconfigure VLANs as end users access the network from different points
or where the same workstation is used by different individuals at different
times.
To use this feature, you have to enter a VLAN identifier, along with other
information, when you create a supplicant account on the RADIUS server.
The server passes the identifier to the switch when a user logs on with a
valid username and password combination or MAC address, depending
on the authentication method.
How the switch responds when it receives VLAN information during the
authentication process can differ depending on the operating mode of the
authenticator port.
Authenticated
Supplicants
RADIUS
Authentication
server
Port 6
Role: Authenticator
Operating Mode: Multiple
Supplicant mode
Ethernet hub or
non-802.1x-compliant
switch