IEEE 802.1X facts for kids

A client (1) needs to be authenticated before it can access a resource (3).

IEEE 802.1X is a special set of rules, called a protocol, that helps keep computer networks safe. Think of it like a security guard for your school's Wi-Fi or a company's computer system. Its main job is to check if devices are allowed to connect and use network resources. This process is called authentication. It also decides what parts of the network a device can use, which is called authorization.

When a device tries to connect, a special server checks its identity. Based on this check, the device either gets permission to use the network or is blocked. This helps prevent unauthorized people or devices from getting onto a private network.

You can find the official IEEE standard for free through the GetIEEE802 program.

What is Network Security?

Computer networks are like roads that connect many devices, such as computers, phones, and printers. Network security is about protecting these roads and the information that travels on them. It stops unwanted visitors from getting in and keeps your data safe.

IEEE 802.1X is a key part of this security. It acts as a gatekeeper at the entrance of a network. Before any device can join, it must pass a check. This ensures that only trusted devices are allowed inside.

How Does IEEE 802.1X Work?

IEEE 802.1X uses three main parts to secure a network:

• Supplicant: This is the device that wants to connect to the network. It could be your laptop, a smartphone, or a printer.
• Authenticator: This is usually a network device like a Wi-Fi router or a network switch. It acts as the security guard. It receives the connection request from the supplicant.
• Authentication Server: This is a powerful computer that holds a list of all allowed devices and users. It checks the supplicant's identity.

The Connection Process

When a supplicant tries to connect, here's what happens:

1. The supplicant sends a request to the authenticator, saying it wants to join.
2. The authenticator then asks the supplicant for its identity. This might be a username and password, or a special digital certificate.
3. The authenticator sends this identity information to the authentication server.
4. The authentication server checks if the supplicant is on its approved list.
5. If the supplicant is approved, the server tells the authenticator to grant access. If not, access is denied.
6. Once access is granted, the supplicant can use the network resources it is allowed to access.

This process makes sure that only authorized users and devices can connect. It adds an important layer of protection to networks.

Where is 802.1X Used?

IEEE 802.1X is used in many places to protect networks. You might find it in:

• Schools and Universities: To secure Wi-Fi networks for students and staff.
• Businesses: To protect company data and resources from unauthorized access.
• Public Wi-Fi Hotspots: Sometimes used in places like airports or cafes for added security.

It's especially useful for networks that need to be very secure. It helps prevent people from simply plugging into a network and gaining access without permission.

Images for kids

• 

  EAP data is first encapsulated in EAPOL frames between the Supplicant and Authenticator, then re-encapsulated between the Authenticator and the Authentication server using RADIUS or Diameter.

• 

  Sequence diagram of the 802.1X progression

See also

In Spanish: IEEE 802.1X para niños