Allied Telesis AT-S62 - Manual (Page 654)

Chapter 29: 802.1x Port-based Network Access Control
654 Section VI: Port Security
An example of this authenticator operating mode is illustrated in Figure
227. The clients are connected to a hub or non-802.1x-compliant switch
which is connected to an authenticator port on an AT-8500 Series switch.
If the authenticator port is set to use the 802.1x authentication method,
each client must be given a separate username and password
combination to log on to and forward traffic through the AT-8500 Series
switch. If the authentication method is MAC address-based, the
authenticator port uses the MAC addresses of the clients as the username
and password combinations. The port accepts and forwards traffic only
from those clients whose MAC addresses have been entered on the
RADIUS server and denies access to all other users.
Figure 227. Authenticator Port in Multiple Operating Mode - Example 1
The next example of the multiple mode in Figure 228 shows two AT-8500
Series switches. The clients connected to switch B have to log on to port 6
on Switch A when they pass a packet to that switch for the first time.
There are several items to note when interconnecting two 802.1x-
compliant devices using the Multiple operating mode of an authenticator
port. In order for switch B in our example to pass the RADIUS messages
to switch A, it must be able to log on to port 6 on switch A. That is why port
11 on the lower switch is configured as a supplicant. If its role is set to
none, port 6 on switch A will discard the packets because switch B would
AT-9400 Series Switch
FAULT
RPS MASTER
POWER
CLASS 1 LASER PRODUCT STATUS TERMINAL PORT
1 3 5 7 9 11
2 4 6 8 10 12
13 15 17 19 21 23R
14 16 18 20 22 24R
AT-9424T/SP Gigabit Ethernet Switch
1 3 5 7 9 11 13 15 17 19 21 23R
2 4 6 8 10 12 14 16 18 20 22 24R
23 24
L/A D/C
D/C L/A
D/C L/A 1000 LINK / ACT HDX / COL FDX 10/100 LINK / ACT PORT ACTIVITY
L/A 1000 LINK / ACT SFP SFP
24
SFP
23
RADIUS
Authentication
Server
Port 6
Role: Authenticator
Operating Mode: Multiple
Piggy-back Mode: -----
Ethernet Hub or
Non-802.1x-compliant
Switch
Authenticated
Clients