You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 6 Next »

IEEE 802.1X is an IEEE Standard for port-based network access control. It is part of the IEEE 802.1 group of networking protocols. It provides an authentication mechanism to devices wishing to attach to a LAN or WLAN. 

802.1X authentication involves three parties:

  1. supplicant
  2. authenticator
  3. authentication server.

The supplicant is a client device (such as a DECT device) that wishes to attach to the LAN. The term 'supplicant' is also used interchangeably to refer to the software running on the client that provides credentials to the authenticator.

The authenticator is a network device that provides a data link between the client and the network and can allow or block network traffic between the two, such as an Ethernet switch or wireless access point; and the authentication server is typically a trusted server that can receive and respond to requests for network access, and can tell the authenticator if the connection is to be allowed, and various settings that should apply to that client's connection or setting. Authentication servers typically run software supporting the RADIUS and EAP protocols. In some cases, the authentication server software may be running on the authenticator hardware. 


Enable via auto-provisioning


<?xml version="1.0" encoding="UTF-8"?>
<settings version="1.0" productID="e2">
    <oper name="change_service_status">
        <param name="eapd" value="1"/> <!-- 1 - enable service, 0 - disable service -->
    </oper>
</settings>


MD5

EAP-TLS

Default uci values

eapd.enabled=0
eapd.supported=0
eapd.lan=interface
eapd.lan.ifname='eth0'
eapd.mode=0
eapd.disable_remote=0
eapd.enable_vlan=1
eapd.enable_dhcp_vlan=1
eapd.enable_lldp_vlan=0
eapd.enable_tagged_eapol=0
eapd.mode_set_by=0
eapd.identity=gigaset
eapd.password=gigaset
eapd.anonymous_identity=anonymous
eapd.dot1x_dir=/config/dot1x
eapd.certs_dir=/config/dot1x/certs
eapd.ca_cert=ca.pem
eapd.client_cert=client.pem
eapd.priv_key=client.key
eapd.priv_key_pwd=whatever
eapd.cfg_fingerprint=0
eapd.certs_fingerprint=0
eapd.cfg_url=http://192.168.2.16:8088/gigaset


If you want to test it with N670 extra DECT base:

  • Start as All-in-one
  • Configure IEEE 802.1x
  • Change role to DECT base
  • No labels