• CAN/CSA-ISO/IEC/IEEE 8802-1X:18

    Superseded A superseded Standard is one, which is fully replaced by another Standard, which is a new edition of the same Standard.

    Information technology — Telecommunications and information exchange between systems — Local and metropolitan area networks — Specific requirements — Part 1X: Port-based network access control (Adopted ISO/IEC/IEEE 8802-1X:2013, first edition, 2013-12-01, including adopted amendment 1:2016)

    Available format(s):  Hardcopy, PDF

    Superseded date:  01-01-2021

    Language(s):  English

    Published date:  01-01-2018

    Publisher:  Canadian Standards Association

    Add To Cart

    Table of Contents - (Show below) - (Hide below)

    1. Overview
    2. Normative references
    3. Definitions
    4. Acronyms and abbreviations
    5. Conformance
    6. Principles of port-based network access
        control operation
    7. Port-based network access control applications
    8. Authentication using EAP
    9. MACsec Key Agreement protocol (MKA)
    10. Network announcements
    11. EAPOL PDUs
    12. PAE operation
    13. PAE MIB
    Annex A (normative) - PICS proforma
    Annex B (informative) - Bibliography
    Annex C (normative) - State diagram notation
    Annex D (normative) - Basic architectural concepts
            and terms
    Annex E (informative) - IEEE 802.1X EAP and RADIUS
            usage guidelines
    Annex F (informative) - Support for 'Wake-on-LAN' protocols
    Annex G (informative) - Unsecured multi-access LANs
    Annex H (informative) - Test vectors
    Annex I (informative) - IEEE list of participants

    Abstract - (Show below) - (Hide below)

    Specifies compatible authentication, authorization, and cryptographic key agreement mechanisms to support secure communication between devices connected by IEEE 802[R] Local Area Networks (LANs), this standard: a) Specifies a general method for provision of port-based network access control, b) Specifies protocols that establish secure associations for IEEE Std 802.1AE[TM] MAC Security, and c) Facilitates the use of industry standard authentication and authorization protocols.

    Scope - (Show below) - (Hide below)

    CSA Preface Standards development within the Information Technology sector is harmonized with international standards development. Through the CSA Technical Committee on Information Technology (TCIT), Canadians serve as the SCC Mirror Committee (SMC) on ISO/IEC Joint Technical Committee 1 on Information Technology (ISO/IEC JTC1) for the Standards Council of Canada (SCC), the ISO member body for Canada and sponsor of the Canadian National Committee of the IEC. Also, as a member of the International Telecommunication Union (ITU), Canada participates in the International Telegraph and Telephone Consultative Committee (ITU-T). Scope For the purpose of providing compatible authentication, authorization, and cryptographic key agreement mechanisms to support secure communication between devices connected by IEEE 802® Local Area Networks (LANs), this standard a) Specifies a general method for provision of port-based network access control. b) Specifies protocols that establish secure associations for IEEE Std 802.1AE™ MAC Security. c) Facilitates the use of industry standard authentication and authorization protocols.

    General Product Information - (Show below) - (Hide below)

    Development Note NEW CHILD AMD 2 2021 IS NOW ADDED
    Document Type Standard
    Product Note NEW CHILD AMD 2 2021 IS NOW ADDED
    Publisher Canadian Standards Association
    Status Superseded
    Superseded By

    Standards Referencing This Book - (Show below) - (Hide below)

    IEEE 802.1AR-2009 IEEE Standard for Local and metropolitan area networks - Secure Device Identity
    ISO/IEC 7498-1:1994 Information technology Open Systems Interconnection Basic Reference Model: The Basic Model
    IEEE 802.1X-2010 IEEE Standard for Local and metropolitan area networks--Port-Based Network Access Control
    IEEE 802.1AD : 2005 LOCAL AND METROPOLITAN AREA NETWORKS - VIRTUAL BRIDGED LOCAL AREA NETWORKS - AMENDMENT 4: PROVIDER BRIDGES
    IEEE 802.1AX-2014 IEEE Standard for Local and metropolitan area networks -- Link Aggregation
    IEEE 802-2014 REDLINE IEEE Standard for Local and Metropolitan Area Networks: Overview and Architecture
    ISO/IEC TR 11802-2:2005 Information technology Telecommunications and information exchange between systems Local and metropolitan area networks Technical reports and guidelines Part 2: Standard Group MAC Addresses
    IEEE 802.3-2012 IEEE Standard for Ethernet
    IEEE 802.1Q-2014 IEEE Standard for Local and metropolitan area networks--Bridges and Bridged Networks
    IEEE 802.11-2016 IEEE Standard for Information technology--Telecommunications and information exchange between systems Local and metropolitan area networks--Specific requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications
    IEEE 802A : 2003 LOCAL AND METROPOLITAN AREA NETWORKS: OVERVIEW AND ARCHITECTURE - AMENDMENT 1: ETHERTYPES FOR PROTOTYPE AND VENDOR-SPECIFIC PROTOCOL DEVELOPMENT
    IEEE 802.1D-2004 IEEE Standard for Local and metropolitan area networks: Media Access Control (MAC) Bridges
    ISO/IEC 8824:1990 Information technology — Open Systems Interconnection — Specification of Abstract Syntax Notation One (ASN.1)
    FIPS PUB 197 : 2001 ADVANCED ENCRYPTION STANDARD (AES)
    ISO/IEC 8825:1990 Information technology — Open Systems Interconnection — Specification of Basic Encoding Rules for Abstract Syntax Notation One (ASN.1)
    ISO/IEC 15802-1:1995 Information technology Telecommunications and information exchange between systems Local and metropolitan area networks Common specifications Part 1: Medium Access Control (MAC) service definition
    IEEE 802.1AB-2009 IEEE Standard for Local and Metropolitan Area Networks-- Station and Media Access Control Connectivity Discovery
    IEEE 802.1AE-2006 IEEE Standard for Local and Metropolitan Area Networks: Media Access Control (MAC) Security
    IEEE 802.1AJ : 2009 LOCAL AND METROPOLITAN AREA NETWORKS - VIRTUAL BRIDGED LOCAL AREA NETWORKS - AMENDMENT 11: TWO-PORT MEDIA ACCESS CONTROL (MAC) RELAY
    IEEE 802.2 : 1998 INFORMATION TECHNOLOGY - TELECOMMUNICATIONS AND INFORMATION EXCHANGE BETWEEN SYSTEMS - LOCAL AND METROPOLITAN AREA NETWORKS - SPECIFIC REQUIREMENTS - PART 2: LOGICAL LINK CONTROL
    • Access your standards online with a subscription

      Features

      • Simple online access to standards, technical information and regulations
      • Critical updates of standards and customisable alerts and notifications
      • Multi - user online standards collection: secure, flexibile and cost effective