String search
Word search

Overview required IEEE 802.1X configuration procedures

IEEE 802.1X configuration

When you want to use IEEE 802.1X port-based authentication for your PRISMAsync Print Server printer, you need to configure IEEE 802.1X on the following devices.

  • Supplicant (PRISMAsync Print Server): The client that requests access to the Local Area Network (LAN) and responds to IEEE 802.1X requests from the authenticator (switch).

  • Authentication server (Network Policy Server (NPS)): Network Policy Server (NPS) is a service included in Windows Server. Its acts as RADIUS server to authenticate clients against Active Directory. The RADIUS server informs the authenticator (switch) that the supplicant is authorized to access the Local Area Network (LAN).

  • Authenticator (switch): The switch controls the physical access to the Local Area Network (LAN) based on the authentication status the RADIUS server has reported.

It is important that you perform the IEEE 802.1X configuration procedures in the order they are listed below.

Prepare the IEEE 802.1X environment

  1. Configure IEEE 802.1X on the authentication server (phase 1)

    1. Configure Network Policy Server (NPS) to support RADIUS clients.

    2. Check if the current RADIUS client (switch) properties are correct.

    3. Add the switch as a RADIUS client to Network Policy Server (NPS).

    4. Check the [Ethernet] Connection Request Policy.

    5. Add the [Ethernet] Connection Request Policy.

    NOTE

    Windows Server 2016 and Windows Server 2012 R2 support RADIUS server platforms. PRISMAsync Print Server supports Windows Server 2016.

    NOTE

    For complete instructions how to configure Windows Server 2016, see the vendor documentation of the server.

    NOTE

    The configuration of IEEE 802.1X on the authentication server occurs in two steps (phase 1 and phase 2).

  2. Configure IEEE 802.1X on the authenticator (switch)

    1. Set up IEEE 802.1X on the switch.

    2. Configure the port that controls the IEEE 802.1X connection to printer.

    3. Enable communication with the RADIUS server.

    4. Enable logging of events.

NOTE

For complete instructions to configure the switch, see the vendor documentation of the switch.

Configure IEEE 802.1X on PRISMAsync Print Server

  1. Import the Identity certificate of the RADIUS server.

  2. Check if the current PRISMAsync Print Server Identity certificate is valid for IEEE 802.1X .

  3. Configure IEEE 802.1X on PRISMAsync Print Server and configure one of the following authentication methods.

    • Configure PEAP with EAP-MS-CHAP-V2.

    • Configure EAP-TLS with printer name authentication.

    • Configure EAP-TLS with username authentication.

    • Configure PEAP with EAP-TLS and printer name authentication.

    • Configure PEAP with EAP-TLS and username authentication.

  4. Test the [Port-based authentication (IEEE 802.1X)] configuration.

  5. Check the current [Port-based authentication (IEEE 802.1X)] status.

Configure the PRISMAsync Print Server authentication method on Active Directory and authentication server

  1. Configure the selected PRISMAsync Print Server authentication method on Active Directory.

    NOTE

    For complete instructions how to configure Windows Server 2016, see the vendor documentation of the server.

  2. Configure the selected PRISMAsync Print Server authentication method on the authentication server (phase 2).

    NOTE

    The configuration of IEEE 802.1X on the authentication server occurs in two steps (phase 1 and phase 2).

    NOTE

    For complete instructions how to configure Windows Server 2016, see the vendor documentation of the server.

More information

Parent topic:
Configure IEEE 802.1X port-based authentication
Privacy Terms of use Cookie information