7.8.1.0 - Force10 Networks

Chapter 4 802.1X
802.1X is supported on platforms: c e s
Protocol Overview
802.1X is a method of port security. A device connected to a port that is enabled with 802.1X is disallowed
from sending or receiving packets on the network until its identity can be verified (through a username and
password, for example). This feature is named for its IEEE specification.
802.1X employs Extensible Authentication Protocol (EAP) to transfer a device’s credentials to an
authentication server (typically RADIUS) via a mandatory intemediary network access device, in this case,
a Force10 switch. The network access device mediates all communication between the end-user device and
the authentication server so that the network remains secure. The network access device uses EAP over
Ethernet (EAPOL) to communicate with the end-user device and EAP over RADIUS to communicate with
the server.
End-user Device Force10 switch RADIUS Server
EAP over LAN (EAPOL) EAP over RADIUS
fnC0033mp
FTOS Configuration Guide, version 7.8.1.0 81