Apple Technical White Paper 802.1X （苹果802.1 x技术白皮书）.pdfVIP

Apple Technical White Paper 802.1X Authentication OS X 10.7.3 and iOS 5.1 May 25, 2012 Contents About 802.1X 3 Apple Product Compatibility with 802.1X 7 Configuring 802.1X Settings 10 Resources 17 Appendix A: Payload Settings for 802.1X 18 Appendix B: Sample Configuration Profiles 25 Appendix C: Using Active Directory Certificates33 Apple Technical White Paper 802.1X Authentication About 802.1X For many organizations, the growing mobility trend has created a greater need to securely manage access for both users and mobile devices between public (unprotected) and private (protected) networks. These organizations need a strong, yet flexible, system to identify and validate users and control device access to protected resources. 802.1X authentication enhances the security of local area networks (LANs) by preventing unauthorized devices from gaining port-level access to protected networks through wired or wireless LAN connections. It leverages an extensible architecture that supports a variety of authentication methods, including passwords, RSA keys, token cards, and certificates. Key Components 802.1X relies on an integrated system of components to manage the authentication process: • Supplicant. Software or service running on a device that seeks access to a protected network. • Authenticator. Software or service running on a wireless access point or switch that manages the authentication process between the supplicant and authentication server. • Authentication server. Software or service that provides authentication services to the authenticator. Using the credentials provided by the supplicant, the authentication server controls whether the supplicant is authorized to access the services provided on the authentication server’s protected network. • Port. A service access point, typically on a router or switch, whose state is either unauthorized or authorized. An unaut