beautypg.com

CANOGA PERKINS CanogaOS Configuration Guide User Manual

Page 312

background image

CanogaOS Configuration Guide

Proprietary & Confidential Canoga Perkins Metro Ethernet Switches

Page 312 of 350

38.1.4 Ports in Authorized and Unauthorized state
Depending on the switch port state, the switch can grant a client access to the network. The port
starts in the unauthorized state. While in this state, the port that disallows all ingress traffic
(default unidirectional control) except for IEEE 802.1x packets. When a client is successfully
authenticated, the port changes to the authorized state, allowing all traffic for the client to flow
normally.

If a client that does not support IEEE 802.1x connects to an unauthorized IEEE 802.1x port, the
switch requests the client’s identity. In this situation, the client does not respond to the request,
the port remains in the unauthorized state, and the client is not granted access to the network.

In contrast, when an IEEE 802.1x-enabled client connects to a port that is not running the IEEE
802.1x standard, the client initiates the authentication process by sending the EAPOL-start