Introduction of Combined Authentication

85 0 0 0

As we all know, authentication methods, MAC authentication, 802.1x authentication and portal authentication are widely used to restrict the unkonwn users. On a network with diversified clients, different clients support different access authentication modes. Some clients (such as printers) support only MAC address authentication. Some hosts support 802.1X authentication because they have 802.1X client software installed. Some hosts require Portal authentication using web browsers. If all the preceding authentication modes are used on a network, they all must be configured on user access interfaces so that users can use a proper authentication mode to connect to the network.

 

If MAC address authentication and external Portal authentication are configured simultaneously on a VLANIF interface, a user is authorized in the following way:

1.       MAC address authentication is performed first. If the user passes MAC address authentication, the user is granted the network access rights for MAC address authentication users.

2.       If Portal authentication is triggered and succeeds after a successful MAC address authentication, the user is granted the network access rights for Portal authentication users. If Portal access is terminated by the user or the device, the user's network access rights are restored to those for MAC address authentication users.

 

It should be pointed out that if Portal authentication is performed for a user after a successful MAC address authentication, the user will not be redirected to the authentication page and needs to enter the authentication page address. If MAC address-prioritized Portal authentication is used, a malicious user may use a bogus MAC address to access the network after an authorized user passes Portal authentication.

 


 


  • x
  • convention:

Comment

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login