Allied Telesis AT-8100L/8POE Switch User Manual


 
AlliedWare Plus Version 2.2.4 Management Software Web Browser User’s Guide
219
An example of this authenticator operating mode is illustrated in Figure
79 on page 219. The clients are connected to a hub or non-802.1x-
compliant switch which is connected to an authenticator port on the
switch. If the authenticator port is set to the 802.1x authentication
method, the clients must provide their username and password
combinations before they can forward traffic through the switch.
Figure 79. Multiple Supplicant Mode
Dynamic VLAN
Assignments
With 802.1x port-based network access control, you can link a username
and password combination or MAC address to a specific VLAN so that the
switch automatically moves the port to the appropriate VLAN when a client
logs on. This frees the network manager from having to reconfigure
VLANs as end users access the network from different points or where the
same workstation is used by different individuals at different times.
To use this feature, you have to enter a VLAN identifier, along with other
information, when you create a client account on the RADIUS server. The
server passes the identifier to the switch when a user logs on with a valid
username and password combination or MAC address, depending on the
authentication method.
How the switch responses when it receives VLAN information during the
authentication process can differ depending on the operating mode of the
authenticator port.
Authenticated
Clients
RADIUS
Authentication
server
Port 6
Role: Authenticator
Operating Mode: Multiple host
mode
Ethernet hub or
non-802.1x-compliant
switch