beautypg.com

Numerics, 10baset – Allied Telesis AlliedWare Plus Operating System Version 5.4.4C (x310-26FT,x310-26FP,x310-50FT,x310-50FP) User Manual

Page 2192

background image

Appendix B: Glossary

Software Reference for x310 Series Switches

B.2

AlliedWare Plus

TM

Operating System - Version 5.4.4C

C613-50046-01 REV A

Numerics

10BaseT

10 Mbps/baseband/twisted pair. The IEEE standard for twisted pair Ethernet.

802.1X

IEEE 802.1x is an IEEE Standard for port-based Network Access Control (

NAC

). It is part of

the IEEE 802.1 group of networking protocols. It provides an authentication mechanism to
devices wishing to attach to a LAN, either establishing a point-to-point connection or
preventing it if authentication fails. It is used for securing wireless 802.11 access points
and is based on the Extensible Authentication Protocol (

EAP

). Authentication is required

on a per-port basis. The main components of an 802.1X implementation are:

The authenticator - the port on this device that wishes to enforce authentication
before allowing access to services that are accessible behind it.

The supplicant - the port that wishes to access services offered by the authenticator’s
system. The supplicant may be a port on a PC or other device connected to this
device.

The authentication server - a device that uses the authentication credentials supplied
by the supplicant, via the authenticator, to determine if the authenticator should
grant access to its services.

See

AAA

and

Tri-authentication

.

For a configuration example see

“Configuring 802.1X” on page 40.7

. For a sample

configuration script see

“Sample 802.1X Authentication Configuration” on page 44.7

.

A

AAA

AAA is the collective title for the three related functions of Authentication, Authorization
and Accounting. These function can be applied in a variety of methods with a variety of
servers.

Authentication is performed in the following contexts:

Login authentication of user shell sessions on the console port, and via telnet/SSH.

802.1X

authentication of devices connecting to switch ports.

MAC authentication

of devices connecting to switch ports.

Web-authentication

of devices connecting to switch ports.

Accounting is performed in the following contexts:

Accounting of console login sessions.

Accounting of 802.1x authenticated connections.

Accounting of MAC authenticated connections.

Accounting of Web authenticated connections.