Administration of the Avaya G350 Media Gateway - Avaya Support

Accessing the Avaya G350 Media Gateway802.1x interacts with existing standards to perform its authentication operation. Specifically, itmakes use of Extensible Authentication Protocol (EAP) messages, encapsulated withinEthernet frames (EAPOL), and EAP over RADIUS for the communication between theAuthenticator and the Authentication Server.Note:Note:The G350 only supports MD5 EAP type.Configuring 802.1xYou can configure 802.1x on the G350’s PoE module (MM314). You can configure 802.1x onany of the MM314 ports except the Gigabit Ethernet port (port 51).To configure 802.1x:1. Configure RADIUS authentication on the G350. For instructions, see RADIUSauthentication on page 40.2. Use the set port dot1x port-control command to change the 802.1x mode of anindividual port. This command must be followed by the module and port number, and the802.1x mode. The following are the possible modes:- force-unauthorize — the port is always blocked- auto — whether the port is blocked or open depends on the authentication outcome- force-authorize — the port is always open (in forwarding state)By default, all ports are in auto mode. In other words, all ports are configured to use 802.1xauthentication if it is enabled on the G350. If a port is not in auto mode, you can use thefollowing command to return the port to auto mode:G350-001(super)# set port dot1x port-control 6/3 autoDone !G350-001(super)#3. Use the set port dot1x port-control command to configure the authenticationmode of the LAN port connected to the RADIUS server as force-authorize. This ensuresthat the port remains open at all times, so that it will be able to transmit authenticationrequests to the RADIUS server. For example, if port 2 is the port that connects to theRADIUS server, type the following command:G350-001(super)# set port dot1x port-control 6/2 force-authorizeDone !G350-001(super)#42 Administration of the Avaya G350 Media Gateway