H3C Technologies H3C Intelligent Management Center - Manual (Page 26)

8
Figure 5 Network diagram of MAC authentication
Features
MAC authentication has the following features:
• UAM serves as the RADIUS server to authenticate user identities.
• Access layer switches determine whether mute terminals can access the network.
• If a PC is attached to an IP phone, you must enable both MAC authentication and 802.1X
authentication on the port of the access layer switch. MAC authentication authenticates the IP
phone, and 802.1X authenticates the user that uses the PC.
UAM local authentication
In UAM local authentication, user data is saved in UAM and UAM authenticates user identities.
If a user is valid, UAM informs the access device to permit network access and assigns the access control
policies to the access device. The access device then controls user access to network according to the
policies.
LDAP authentication
Application scenarios
LDAP authentication, shown in Figure 6 , is used in a network that uses an LDAP server to manage users.
You only need to periodically synchronize user information from the LDAP server to UAM.