Dell FCX624-I Laptop User Manual


  Open as PDF
of 1494
 
PowerConnect B-Series FCX Configuration Guide 1227
53-1002266-01
Configuring 802.1X port security
34
1. A RADIUS server successfully authenticates an 802.1X client.
2. If 802.1X accounting is enabled, the Dell PowerConnect device sends an 802.1X Accounting
Start packet to the RADIUS server, indicating the start of a new session.
3. The RADIUS server acknowledges the Accounting Start packet.
4. The RADIUS server records information about the client.
5. When the session is concluded, the Dell PowerConnect device sends an Accounting Stop
packet to the RADIUS server, indicating the end of the session.
6. The RADIUS server acknowledges the Accounting Stop packet.
To enable 802.1X accounting, refer to “Configuring 802.1X accounting” on page 1246.
Configuring 802.1X port security
Configuring 802.1X port security on a Dell PowerConnect device consists of the following tasks.
1. Configure the device interaction with the Authentication Server:
“Configuring an authentication method list for 802.1X” on page 1227
“Setting RADIUS parameters” on page 1228
“Configuring dynamic VLAN assignment for 802.1X ports” on page 1230 (optional)
“Dynamically applying IP ACLs and MAC address filters to 802.1X ports” on page 1234
2. Configure the device role as the Authenticator:
“Enabling 802.1X port security” on page 1237
“Initializing 802.1X on a port” on page 1242 (optional)
3. Configure the device interaction with Clients:
“Configuring periodic re-authentication” on page 1239 (optional)
“Re-authenticating a port manually” on page 1239 (optional)
“Setting the quiet period” on page 1240 (optional)
“Setting the wait interval for EAP frame retransmissions” on page 1240 (optional)
“Setting the maximum number of EAP frame retransmissions” on page 1241 (optional)
“Specifying a timeout for retransmission of messages to the authentication server” on
page 1242 (optional)
“Allowing access to multiple hosts” on page 1242 (optional)
“Defining MAC address filters for EAP frames” on page 1245 (optional)
Configuring an authentication method list for 802.1X
To use 802.1X port security, you must specify an authentication method to be used to authenticate
Clients. Dell supports RADIUS authentication with 802.1X port security. To use RADIUS
authentication with 802.1X port security, you create an authentication method list for 802.1X and
specify RADIUS as an authentication method, then configure communication between the Dell
PowerConnect device and RADIUS server.