|
|
| Line 119: |
Line 119: |
| ==802.1X Client== | | ==802.1X Client== |
|
| |
|
| <b>802.1X</b> is a network authentication protocol that opens ports for network access when an organization authenticates a user's identity and authorizes them for access to the network. The user's identity is determined based on their credentials or certificate, which is confirmed by the authentication server. The supplicant, or client, is the device attempting to gain access to the network. | | <b>802.1X</b> is a network authentication protocol that opens ports for network access when an organization authenticates a user's identity and authorizes them for access to the network. The user's identity is determined based on their credentials or certificate, which is confirmed by the authentication server. |
|
| |
|
| ===Port status=== | | ===Port status=== |
| Line 213: |
Line 213: |
|
| |
|
| [[File:Networking_rutos_manual_network_port_port_status_8021x.png|border|class=tlt-border]] | | [[File:Networking_rutos_manual_network_port_port_status_8021x.png|border|class=tlt-border]] |
| }}
| |
|
| |
| {{#switch: {{{series}}} | OTD500 | RUTM | TRB1 | TRB2 | TRB2M | RUT2M | RUT9M | RUT301 | RUT361 | RUT14X | RUT206 | TRB160 | OTD140 =
| |
| ==802.1X Server==
| |
|
| |
| <b>The 802.1X</b> authentication server is typically an EAP-compliant RADIUS server which can authenticate either users (through passwords or certificates) or the client computer.
| |
|
| |
| ===Port status===
| |
| ----
| |
| The figure below is an example of the '''Port status''' section (the number of ports depends on the device model):
| |
|
| |
| [[File:Networking_rutos_manual_network_port_all_ports.png|border|class=tlt-border]]
| |
|
| |
| To change port settings select port and press `edit (number of ports) ports` button:
| |
|
| |
| [[File:Networking_rutos_manual_network_port_all_ports_edit.png|border|class=tlt-border]]
| |
|
| |
| You will be redirected to `802.1X settings`. From here you can change 802.1X settings.
| |
| {{#switch: {{{series}}} | #default =
| |
| [[File:Networking_rutos_manual_network_port_8021x_port_settings_server.png|border|class=tlt-border]]
| |
| | RUTM =
| |
| [[File:Networking_rutos_manual_network_port_8021x_port_settings_server_rutm.png|border|class=tlt-border]]}}
| |
|
| |
| <table class="nd-mantable">
| |
| <tr>
| |
| <th>Field</th>
| |
| <th>Value</th>
| |
| <th>Description</th>
| |
| </tr>
| |
| <tr>
| |
| <td>Enable</td>
| |
| <td>off {{!}} <span style="color:blue">on</span>; default: <b>off</b></td>
| |
| <td>Toggle 802.1x on or off.</td>
| |
| </tr>{{#switch: {{{series}}} | #default = | RUTM =
| |
| <tr>
| |
| <td>Role</td>
| |
| <td>Client {{!}} Server; default: <b>choose "server" role for 802.1X server configuration</b></td>
| |
| <td>Toggle 802.1x role.</td>
| |
| </tr>
| |
| <tr>
| |
| <td>Enable dynamic VLANs</td>
| |
| <td>off {{!}} on; default: <b>off</b></td>
| |
| <td>Option available when ports are moved to VLANs.</td>
| |
| </tr>}}
| |
| <tr>
| |
| <td>Radius server</td>
| |
| <td>radius server id; default: <b>example</b></td>
| |
| <td>Authentication type.</td>
| |
| </tr>{{#switch: {{{series}}} | #default =
| |
| <tr>
| |
| <td>Reject VLAN</td>
| |
| <td>Disabled {{!}} VLAN1 {{!}} VLAN2; default: <b>Disabled</b></td>
| |
| <td>Select reject VLAN 802.1x for server service.</td>
| |
| </tr>
| |
| <tr>
| |
| <td>Accept VLAN</td>
| |
| <td>Radius assigned {{!}} VLAN1 {{!}} VLAN2; default: <b>VLAN1</b></td>
| |
| <td>Select accept VLAN 802.1x for server service.</td>
| |
| </tr>| RUTM =
| |
| <tr>
| |
| <td><span style="color:blue">Reject VLAN</span></td>
| |
| <td>Disabled {{!}} VLAN1 {{!}} VLAN2; default: <b>Disabled</b></td>
| |
| <td>Select reject VLAN 802.1x for server service.</td>
| |
| </tr>
| |
| <tr>
| |
| <td><span style="color:blue">Accept VLAN</span></td>
| |
| <td>Radius assigned {{!}} VLAN1 {{!}} VLAN2; default: <b>Radius assigned</b></td>
| |
| <td>Select accept VLAN 802.1x for server service.</td>
| |
| </tr>}}
| |
| </table>
| |
|
| |
| ===802.1X status===
| |
| ----
| |
| This section displays port 802.1X status information. There is also an option to select ports and enable authentication:
| |
|
| |
| [[File:Networking_rutos_manual_network_port_port_status_8021x_server.png|border|class=tlt-border]]
| |
|
| |
| ==RADIUS==
| |
|
| |
| The <b>RADIUS</b> page is used to create and manage radius servers:
| |
|
| |
| [[File:Networking_rutos_manual_ports_port_radius.png|border|class=tlt-border]]
| |
|
| |
| <table class="nd-othertables_2">
| |
| <tr>
| |
| <th width="250">Field Name</th>
| |
| <th width="900">Description</th>
| |
| </tr>
| |
| <tr>
| |
| <td>ID</td>
| |
| <td>RADIUS server ID.</td>
| |
| </tr>
| |
| <tr>
| |
| <td>Address (IPv4)</td>
| |
| <td>RADIUS server IP.</td>
| |
| </tr>
| |
| <tr>
| |
| <td>Authentication port</td>
| |
| <td>RADIUS server athentication port.</td>
| |
| </tr>
| |
| <tr>
| |
| <td>Actions</td>
| |
| <td>-(interactive buttons)</td>
| |
| </tr>
| |
| </table>
| |
|
| |
| ===Radius Configuration===
| |
| ----
| |
| The RADIUS configuration window should look similar to this:
| |
|
| |
| [[File:Networking_rutos_manual_ports_port_radius_configuration.png|border|class=tlt-border]]
| |
|
| |
| <table class="nd-mantable">
| |
| <tr>
| |
| <th>Field</th>
| |
| <th>Value</th>
| |
| <th>Description</th>
| |
| </tr>
| |
| <tr>
| |
| <td>IP address</td>
| |
| <td>ip; default: <b>0.0.0.0</b></td>
| |
| <td>RADIUS server IP.</td>
| |
| </tr>
| |
| <tr>
| |
| <td>Authentication port</td>
| |
| <td>integer [1.. 65535]; default: <b>1812</b></td>
| |
| <td>RADIUS server athentication port.</td>
| |
| </tr>
| |
| <tr>
| |
| <td>Secret</td>
| |
| <td>string; default: <b>-</b></td>
| |
| <td>RADIUS server secret.</td>
| |
| </tr>
| |
| <tr>
| |
| <td>Test connectivity</td>
| |
| <td>-(interactive) button</td>
| |
| <td>Test connectivity to RADIUS server.</td>
| |
| </tr>
| |
| <tr>
| |
| <td>Test user credentials</td>
| |
| <td>-(interactive) button</td>
| |
| <td>Test credentials to RADIUS server.</td>
| |
| </tr>
| |
| <tr>
| |
| <td>Enable backup RADIUS server</td>
| |
| <td>off {{!}} <span style="color: red;">on</span>; default: <b>off</b></td>
| |
| <td>Enable backup RADIUS server.</td>
| |
| </tr>
| |
| <tr>
| |
| <td><span style="color: red;">IP address</span></td>
| |
| <td>ip; default: <b>none</b></td>
| |
| <td>Backup RADIUS server IP.</td>
| |
| </tr>
| |
| <tr>
| |
| <td><span style="color: red;">Authentication port</span></td>
| |
| <td>integer [1.. 65535]; default: <b>none</b></td>
| |
| <td>Backup RADIUS server authentication port.</td>
| |
| </tr>
| |
| <tr>
| |
| <td><span style="color: red;">Secret</span></td>
| |
| <td>string; default: <b>-</b></td>
| |
| <td>Backup RADIUS server secret.</td>
| |
| </tr>
| |
| <tr>
| |
| <td><span style="color: red;">Test connectivity</span></td>
| |
| <td>-(interactive) button</td>
| |
| <td>Test connectivity to backup RADIUS server.</td>
| |
| </tr>
| |
| <tr>
| |
| <td><span style="color: red;">Test user credentials</span></td>
| |
| <td>-(interactive) button</td>
| |
| <td>Test credentials to backup RADIUS server.</td>
| |
| </tr>
| |
| }} | | }} |
|
| |
|
| [[Category:{{{name}}} Network section]] | | [[Category:{{{name}}} Network section]] |
