Basic steps in an 802.1x conversation – Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual
Page 1062
802.1X Introduction and Configuration
Software Reference for x310 Series Switches
40.4
AlliedWare Plus
TM
Operating System - Version 5.4.4C
C613-50046-01 REV A
Basic steps in an 802.1X conversation
Step
Action
1
The supplicant informs the authenticator that it wants to
initiate the conversation.
2
The authenticator requests the supplicant's credentials.
3
The supplicant sends username/password or X.509 certificate.
4
The authenticator wraps the supplicant's reply into a RADIUS
packet and sends it to the RADIUS server.
5
The RADIUS server chooses an authentication method, and
sends an appropriate request to the supplicant as a ‘challenge’.
6
The RADIUS server and supplicant exchange some messages,
ferried by the authenticator.
7
The RADIUS server eventually decides if the supplicant is
allowed access and the RADIUS server sends an Access-Accept
or Access-Reject message to the Authenticator.
8
The authenticator sends an EAPoL-Success or EAPoL-Fail to the
supplicant.
9
The supplicant has a session using the network (if accepted).
10
When the session is over, the supplicant sends a log-off
message.