This article describes about configuring wired 802.1x authentication. There will be 4 parts of configurations.
Vigor routers support LAN Wired 802.1x authentication feature. The device connected to the specific LAN port must pass EAPOL authentication.
Please note that 802.1x enabled LAN ports support EAPOL authentication for one network device only. Therefore, issues may occur when 802.1x enabled LAN ports connect to a L2 switch. If you want 802.1x support multiple network devices, please disable 802.1x authentication on router and configure the feature on the connecting switch. This feature supports PEAP and EAP-TLS.
The following is an example for PEAP:
Part A: Vigor router configuration
1. Configure Wired 802.1x function
Enable the function at LAN -> Wired 802.1x, and set 802.1x LAN ports. As the screenshot below, the device connected to LAN P4 must pass 802.1x authentication.
2. Configure RADIUS function
Enable the function at Applications -> RADIUS, and set RADIUS server information.
Part B: RADIUS server configuration
We use VigorAP800 as the RADIUS server as an example, to enable RADIUS server, and to set a Authentication Client for Vigor router (RADIUS client) and a User Profile for connected PC 802.1x authentication.
Part C: PC configuration
1. Start Wired AutoConfig service
To start Wired AutoConfig Service at Control Panel -> Administrative Tools -> Services manually.
2. PC NIC configurtation
Click the NIC icon on the screen of lower right, and follow the steps on the following screenshot to set it. Please disable the item Cache user information for subsequent connections to this network, so the connected PC must enter username/password manually every time after unplug and plug.
Part D: Connect PC to Vigor router
Connect PC to Vigor router LAN P4. A notification will show up at the lower right corner of the screen. Click it, and an Enter Credentials window will show up. Enter username and password which you have set on RADIUS server (AP800 ) previously, and the PC will get IP from Vigor router after passing 802.1x authentication.