802.1X

802.1X is currently only for SonicWave 224 models.

802.1X is an IEEE standard for media-level (Layer 2) access control, offering the capability to permit or deny network connectivity based on the identity of the end user or device.

802.1X enables port-based access control using authentication. An 802.1X-enabled port can be dynamically enabled or disabled based on the identity of the user or device that connects to it.

802.1X uses these protocols:

• Extensible Authentication Protocol (EAP): The message format and framework defined by RFC 4187 that provides a way for the supplicant and the authenticator to negotiate an authentication method (the EAP method).
• EAP method: Defines the authentication method; that is. the credential type and how it is submitted from the supplicant to the authentication server using the EAP framework. Common EAP methods used in 802.1X networks are EAP-Transport Layer Security (EAP-TLS) and Protected EAP-Microsoft Challenge Handshake Authentication Protocol version 2 (PEAP-MSCHAPv2).
• EAP over LAN (EAPoL): An encapsulation defined by 802.1X for the transport of the EAP from the supplicant to the switch over IEEE 802 networks. EAPoL is a Layer 2 protocol.
• RADIUS: The de facto standard for communication between the switch and the authentication server. The authenticator extracts the EAP payload from the Layer 2 EAPoL frame and encapsulates the payload inside a Layer 7 RADIUS packet.

To activate 802.1X support for a device

1. Navigate to Policies > Policy Hierarchy.
2. Select the AP Policy.
3. Scroll to and click the 802.1X tab.
4. Fill in the values needed for the EAP Settings and RADIUS Server, and RADIUS Accounting Server.
5. Click the Port Setting tab.
6. Select the device you want to configure.
7. In the 802,1X column, activate the slider for the ports for which you want to use the 802.1X protocol.
8. Click OK.