802.1X NAC
802.1X is a port-based network access control (or PNAC) protocol, which provides the authentication control for devices attempting to connect to both local area networks (LANs) and wireless local area networks (or WLANs).
3 slides · 1 min read · Domain 4
Consisting of three components: the supplicant (users' device), the authenticator (a switch or access point) and an authentication server.
The key elements provided by 802.1X are:
- Detection of devices attempting to make a network connection
- Authentication of devices
- Authorization of devices
- Enforcement of the security requirements as defined by the policy
- Device scanning, checking the devices' current security settings
- Onboarding, setting or modifying the security settings
- Termination, cleaning up after session termination
The enforcement process is slightly different between wired and wireless devices although the principle remains the same.
With wireless devices, the device must first authenticate itself to the access point using Wi-Fi Protected Access (WPA). Wired devices will connect via a switch, which will provide port-based authentication.