.. _example_interfaces_ethernet_802.1x_checkconnection:

################
Check Connection
################

This scenario shows how to configure 802.1x authentication and accounting for an Ethernet interface.

.. image:: topology.svg
  :width: 800

**************************
Test 802.1x Authentication
**************************

Description
===========

Initially, DUT0 is configured with a 802.1x authenticated
interface. Then, DUT1 is configured to perform
authentication by sending a ``EAPOL-Start`` message.
Reauthentication is disabled.

Scenario
========

.. include:: checkconnection/test802.1xauthentication

.. raw:: html

  <hr>

**********************************
Test 802.1x Authentication Request
**********************************

Description
===========

Initially, DUT1 is configured to perform authentication,
but DUT0 does require the use of 802.1x. Afterwards, the
port in DUT0 is reconfigured to use 802.1x authentication.
Reauthentication is enabled.

Scenario
========

.. include:: checkconnection/test802.1xauthenticationrequest

.. raw:: html

  <hr>

**********************
Test Re-Authentication
**********************

Description
===========

DUT0 is configured with a 802.1x authenticated interface.
DUT1 is authenticated successfully and can ping DUT0.
Periodically, DUT0 multicasts EAP-Requests to ask DUT1
for reauthentication.

Scenario
========

.. include:: checkconnection/testre-authentication

.. raw:: html

  <hr>

************************
Test Authentication Deny
************************

Description
===========

DUT0 is configured with a 802.1x authenticated interface.
DUT1 fails to authenticate and all its traffic is
dropped.

Scenario
========

.. include:: checkconnection/testauthenticationdeny

.. raw:: html

  <hr>

*********************
Test Deauthentication
*********************

Description
===========

DUT0 is configured with a 802.1x authenticated interface.
DUT1 is authenticated successfully and then, when its
configuration changes, it fails to authenticate and all
its traffic is dropped.

Scenario
========

.. include:: checkconnection/testdeauthentication

.. raw:: html

  <hr>

***************
Test Accounting
***************

Description
===========

DUT0 is configured with a 802.1x authenticated interface.
DUT1 is authenticated and the accounting information is
sent to the RADIUS server.

Scenario
========

.. include:: checkconnection/testaccounting

.. raw:: html

  <hr>