Network requirements
As shown in Figure 32, the hosts on the intranet 192.168.1.0/24 are attached to port GigabitEthernet 1/0/1 of the network access device, and they use DHCP to obtain IP addresses.
Deploy the EAD solution for the intranet so that all hosts must pass 802.1X authentication to access the network.
Configure the following to allow all intranet users to install and update the 802.1X client program from a Web server:
Allow unauthenticated users to access the segment of 192.168.2.0/24 and to obtain IP addresses on the segment of 192.168.1.0/24 through DHCP.
Redirect unauthenticated users to a preconfigured webpage when the users use a Web browser to access any external network except 192.168.2.0/24. The webpage allows users to download the 802.1X client program.
Allow authenticated 802.1X users to access the network.
Figure 32: Network diagram
In addition to the configuration on the access device, complete the following tasks:
Configure the DHCP server so that the host can obtain an IP address on the segment of 192.168.1.0/24.
Configure the Web server so that users can log in to the webpage to download 802.1X clients.
Configure the authentication server to provide authentication, authorization, and accounting services.