MAC + 802.1x authentication for wired user(MAC first)

Mysterious.color · Created Dec 25, 2018 13:35:32

informative

yiyi0519 · Created Dec 26, 2018 00:37:55

it is a good case, If we want to control user permissions through ACL, what configuration do I need to add?

SupperRobin · Created Dec 29, 2018 03:08:58

Fixed user name: Regardless of users' MAC addresses, all users use a fixed name and password designated on the access device for authentication. As multiple users can be authenticated on the same interface, all users requiring MAC address authentication on the interface use the same fixed user name. The server only needs to configure one user account to meet the authentication demands of all users. This applies to a network environment with reliable clients.

Finn92 · Created Dec 29, 2018 03:13:38

If the administrator modifies parameters such as access rights and authorization attributes of an online user on the authentication server, the user must be re-authenticated to ensure user validity.

If re-authentication is configured for online 802.1X authentication users, the device sends saved authentication parameters of an online user to the authentication server for re-authentication. The device saves user authentication information after users go online. If the user authentication information on the authentication server remains unchanged, the user keeps online. If the information has been modified, the user is disconnected and needs to be re-authenticated.

Torrent · Created Dec 29, 2018 06:07:57

The client initiates the authentication request through the HTTP/HTTPS protocol. When a HTTP/HTTPS message is connected to a device, the access device allows the HTTP/HTTPS message to access the portal server or a set of uncertified network resources, and the access device redirects it to the portal Server for HTTP/HTTPS messages that access other addresses. The Portal Server provides a Web page for the user to enter a user name and password for authentication, and notifies the client to send a post authentication request message to the access device.

thanks for sharing, we learned a lot.

Enterprise

Consumer

Corporate

Carriers

MAC + 802.1x authentication for wired user(MAC first)

Third Party’s Trade Secret