Ruckus Wireless ZoneFlex 7343 Guía de usuario descargar pdf (Pagina 94)

Configuring the Access Point

Configuring Ethernet Ports

Access Port

Access Ports are used to provide network access. Traffic arriving on different Access

Ports can be segmented into different logical networks (VLANs) using the Untag VLAN

ID field. Access Ports are members of only one VLAN--the VLAN that is configured in

the Untag VLAN field.

General Port

The General Port can be configured to support multiple tagged VLANs and one

untagged VLAN. As Trunk Ports by definition are members of all VLANs, the General

Port is the only port type for which membership is user configurable.

Working with 802.1X on Wired Ethernet Ports

802.1X authentication consists of the following three components:

■ Supplicant: The supplicant sends access request messages along with credentials,

such as user name / password or digital certificate, to an authenticator, which

forwards the credentials to the authentication server for verification.

■ Authenticator: The authenticator challenges the identity of the supplicant, then

passes its credentials to the AAA server. If the credentials are accepted the

supplicant is allowed access.

■ Authentication Server (AAA Server): The AAA server verifies the supplicant’s

credentials and permits or rejects its request for access.

For wired 802.1X, a Ruckus AP’s Ethernet port can be configured as either an

Authenticator or as a Supplicant, depending on which port type is selected. Ta b le 27

and Table 28

describe the 802.1X roles available by port type.

Table 27. Authenticator support by port type

Table 28. Supplicant support by port type

The following considerations apply:

Trunk Port Access Port General Port

Port-based mode X X X

MAC-based mode X

Trunk Port Access Port General Port

Supplicant X

1 2 ... 89 90 91 92 93 94 95 96 97 98 99 ... 127 128

Sin comentarios

Ruckus Wireless ZoneFlex 7343 Guía de usuario Pagina 94