3Com 3C17300A Implementation Guide - Page 81

How Network Login Works, Works - default ip

Page 81 highlights

What is Network Login? 81 How Network Login Works When Network Login is enabled the Switch acts as a relay agent between the client device that is requesting access to the network and the RADIUS server. The authentication information that is exchanged between the client device and the RADIUS server is received and transmitted by the Switch, as shown in Figure 19. The Switch does not interpret or store this information. If the RADIUS server is unavailable, the switch may be configured to provide default access on each port that has switch-configured VLAN and QoS parameters. If default access has not been configured the switch will maintain port security settings. Figure 19 Network Login Operation Network Access Client (Client Device) Network Access Server (Switch 4200) Authentication Information Authentication Information RADIUS Server When the client device and RADIUS server have exchanged authentication information, the Switch receives either an authentication succeeded or failed message from the server, and then configures the port to forward or filter traffic as appropriate. If access is granted, the Spanning Tree Protocol places the port into the forwarding state and the client device can obtain an IP address. If possible, when a port is configured for Network Login, it should also be configured to 'Auto' or 'Enable' Spanning Tree Protocol (STP) FastStart. STP Faststart minimizes the delay before STP places the port into the forwarding state.

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122

What is Network Login?
81
How
Network Login
Works
When Network Login is enabled the Switch acts as a relay agent between
the client device that is requesting access to the network and the RADIUS
server. The authentication information that is exchanged between the
client device and the RADIUS server is received and transmitted by the
Switch, as shown in
Figure 19
. The Switch does not interpret or store this
information.
If the RADIUS server is unavailable, the switch may be configured to
provide default access on each port that has switch-configured VLAN and
QoS parameters.
If default access has not been configured the switch
will maintain port security settings.
Figure 19
Network Login Operation
When the client device and RADIUS server have exchanged
authentication information, the Switch receives either an authentication
succeeded or failed message from the server, and then configures the
port to forward or filter traffic as appropriate. If access is granted, the
Spanning Tree Protocol places the port into the forwarding state and the
client device can obtain an IP address.
If possible, when a port is configured for Network Login, it should also be
configured to ‘Auto’ or ‘Enable’ Spanning Tree Protocol (STP) FastStart.
STP Faststart minimizes the delay before STP places the port into the
forwarding state.
Network Access Server
(Switch 4200)
Network Access Client
(Client Device)
Authentication
Information
Authentication
Information
RADIUS Server