
78
Configuring the Access Point
Configuring Ethernet Ports
General Port
The General Port can be configured to support multiple tagged VLANs and one
untagged VLAN. As Trunk Ports by definition are members of all VLANs, the General
Port is the only port type for which membership is user configurable.
Working with 802.1X on Wired Ethernet Ports
802.1X authentication consists of the following three components:
■ Supplicant: The supplicant sends access request messages along with credentials,
such as user name / password or digital certificate, to an authenticator, which
forwards the credentials to the authentication server for verification.
■ Authenticator: The authenticator challenges the identity of the supplicant, then
passes its credentials to the AAA server. If the credentials are accepted the
supplicant is allowed access.
■ Authentication Server (AAA Server): The AAA server verifies the supplicant’s
credentials and permits or rejects its request for access.
For wired 802.1X, a Ruckus AP’s Ethernet port can be configured as either an
Authenticator or as a Supplicant, depending on which port type is selected. Ta b le 23
and Table 24
describe the 802.1X roles available by port type.
Table 23. Authenticator support by port type
Table 24. Supplicant support by port type
The following considerations apply:
■ A single port can not be configured as both an Authenticator and Supplicant at
the same time.
■ Only one port per AP can be configured as a Supplicant.
■ If the AP is connecting to a switch port with 802.1X authentication enabled, the
AP’s port type should be configured as a Trunk Port and its role should be
configured as Supplicant. The switch port should be configured as a Trunk port in
Port-based Authenticator mode.
Trunk Port Access Port General Port
Port-based mode X X X
MAC-based mode X
Trunk Port Access Port General Port
Supplicant X
Kommentare zu diesen Handbüchern