This feature, also called “ AAA FastConnect,” is useful for deployments where an 802.1x EAP-compliant RADIUS server is not available or required for authentication. The 802.1x authentication server is typically an EAP-compliant Remote Access Dial-In User Service (RADIUS) server which can authenticate either users (through passwords or certificates) or the client computer.Īn example of an 802.1x authentication server is the Internet Authentication Service (IAS) in Windows (see (WS.10).aspx).Īrubauser-centric networks, you can terminate the 802.1x authentication on the controllerĬontrollerpasses user authentication to its internal database or to a “backend” non-802.1x server. The authentication server provides a database of information required for authentication and informs the authenticator to deny or permit access to the supplicant.
The EAP type must be consistent between the authentication server and supplicant and is transparent to the controller. The Arubacontroller acts as the authenticator, relaying information between the authentication server and supplicant.
The authenticator is the gatekeeper to the network and permits or denies access to the supplicants. You can configure the Arubauser-centric network to support 802.1x authentication for wired users as well as wireless users. The supplicant, or client, is the device attempting to gain access to the network. Stateful 802.1x, stateful NTLM, and WISPr authentication: “Stateful and WISPr Authentication”Ĩ02.1x authentication consists of three components: MAC authentication: “Configuring MAC-Based Authentication” Other types of authentication not discussed in this chapter can be found in the following sections of this guide:Ĭaptive portal authentication: “Captive Portal Authentication” “Advanced Configuration Options for 802.1x” This chapter describes the following topics: These protocols allow the network to authenticate the client while also allowing the client to authenticate the network. The authentication protocols that operate inside the 802.1x framework that are suitable for wireless networks include EAP-Transport Layer Security (EAP-TLS), Protected EAP (PEAP), and EAP-Tunneled TLS (EAP-TTLS). 802.1x uses the Extensible Authentication Protocol (EAP) to exchange messages during the authentication process. 802.1x is an Institute of Electrical and Electronics Engineers (IEEE) standard that provides an authentication framework for WLANs.
0 kommentar(er)
