Allied Telesis sr264-03 Switch User Manual


  Open as PDF
of 6
 
6 Patch Release Note
Patch sr264-03 for Software Release 2.6.4
C613-10407-00 REV C
7. When the supplicant sends an EAPOL-Logoff message to the authenticator
the port under 802.1x control is set to unauthorised.
A successful authentication message exchange, initiated and ended by a
supplicant using OTP authentication, is shown in below.
To minimise the risk of denial-of-service attacks by issuing EAPOL-Logoff
messages to an Authenticator Port Access Entity (PAE) from a third party
device, we recommend that 802.1x not be used in a shared media LAN.
Figure 1: Authentication Messaging Exchange Initiated by the Supplicant.
Availability
Patches can be downloaded from the Software Updates area of the Allied
Telesyn web site at www.alliedtelesyn.co.nz/support/updates/patches.html
. A
licence or password is not required to use a patch.
8021X5
Port Unauthorised
EAPOL-Start
EAP-Request/Identity
EAP-Response/Identity
EAP-Request/OTP
EAP-Response/OTP
EAP-Success
Port Authorised
Authenticator PAE
Authenticator Server
Supplicant PAE
EAPOL-Logoff
Port Unauthorised
Exchange of EAPOL frames
Exchange of EAP frames carried
by RADIUS
 previous