H3C Technologies H3C S3100 Series Switches - Manual (Page 478)

1-1
1
Triple Authentication Configuration
Triple Authentication Overview
Currently, among S3100 series Ethernet switches, only the S3100-EI series support triple
authentication.
Background
The terminals in a LAN may support different authentication methods. As shown in Figure 1-1 , a printer
supports only MAC authentication, a PC installed with the 802.1X client supports 802.1X authentication,
and the other PC without the 802.1X client installed carries out Web authentication. To satisfy the
different authentication requirements, the port of the access device which connects to the terminals
needs to support all the three types of authentication and allow a terminal to access the network after
passing a type of authentication.
Figure 1-1 Triple authentication network diagram
IP network
802.1X client Web user Printer
802.1X authentication
MAC authentication
Web authentication
AAA server
The triple authentication solution can satisfy the above-mentioned requirements. It is implemented by
enabling Web authentication, MAC authentication and 802.1X authentication on an Ethernet port. A
terminal connected to that port can access the network after passing a type of authentication among the
three.
Triple Authentication Mechanism
The three types of authentication enabled on an access port are triggered differently.