IEEE 802.1x

IEEE 802.1x

1. Authenticator

2. Supplicant

   • 802.1x client (usually end-user devices)

3. AAA

   • AAA Server: Example: Cisco Access Control Server (ACS)
   • RADIUS
     • Uses UDP
     • Most often used for: Users Transport Protocol: UDP Authentication port number(s): 1645, 1812 Protocol encrypts the password: Yes Protocol encrypts the entire packet: No Supports function to authorize each user to a subset of CLI commands: No Defined by: RFC 2865
   • TACACS+
     • Uses TCP
     • Most often used for : Network Devices Transport Protocol: TCP Authentication port number(s): 49 Protocol encrypts the password: Yes Protocol encrypts the entire packet: Yes Supports function to authorize each user to a subset of CLI commands: Yes Defined by: Cisco