🪪

802.1X / EAP — Port-Based Auth

Medium

Free preview · 2 of 6 steps

802.1X: authenticate before network access

In enterprise networks, you can't trust a device just because it's plugged in or has the Wi-Fi password. 802.1X enforces authentication at the port level — the switch or AP keeps the port unauthorized (only EAPOL traffic allowed) until the device proves its identity to a RADIUS server.

Three roles: Supplicant (device), Authenticator (AP/switch), Authentication Server (RADIUS).

Packets in motion — click to inspect:

1 / 2

Space to play/pause · ← → to step