D-Link DGS-6600-48TS Configuration Guide - Page 435

Volume 8-Security & Authentication / Chapter 40-802.1X Authentication 802.1X Configuration Commands more detailed explanation of how the authentication process is completed between the three roles stated previously. Figure 40-2 802.1X Authentication Process Port-based and Host-based Access Control Port-based Access Control Once the connected device has successfully been authenticated, the Port will become an Authorized port, and all subsequent traffic on the Port will not be subject to access control restrictions until an event occurs that causes the Port to become Unauthorized. Hence, if the Port is actually connected to a shared media LAN segment with more than one attached device, successfully authenticating one of the attached devices will effectively allow LAN access to all the devices on the shared segment. Host-based Network Access Control In order to successfully make use of 802.1X in a shared media LAN segment, "logical" ports need to be created for each attached device that requires access to the LAN. The Switch would regard the single physical port that is connected to the shared media segment as consisting of a number of distinct logical ports, with each logical Port being independently controlled from the point of view of EAPOL exchanges and the authorization state. The Switch learns each attached devices' individual MAC address, and effectively creates a logical port, which the attached device can use to communicate with the LAN via the Switch. 802.1X Configuration Commands Configuring 802.1X Authentication The following topics are included in this section: • Enabling Authentication • Initializing the 802.1x Protocol Operation DGS-6600 Configuration Guide 435