new to dot1x a few questions

[jmoss1]

We want to start using dot1x on our network to authenticate user access.

Can anyone explain the process of what happens when the client asks for authentication. I understand that the switch then checks with the RADIUS server for authentication. But what we are unsure on is what is actually being checked at this point. Is it looking for the mac-address of the machine? or something else?

also we run with mainly 2000/98 clients will dot1x work with these.

Thanks in advance

[sanpatel]

It depends on the 'EAP' type, or the authentication method that has been configured on the switch. If it is say, EAP-MD5, then the user's username and password are checked.

You may want read a paper like this to get a better understanding:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_white_paper09186a0080088890.shtml

Check the microsoft web site for EAP support in those OSes.