All, I know this should be in the security forum, but Im not having much luck understanding this at the moment. Can you guys please help me understand one thing in particular:

Im trying to find out how to use Dot1x port authentication. What Im trying to do is boot clientless system into a guest vlan OR if its a regular PC, Im trying to allow it into a native vlan. Im trying to understand "port authentication". Below is a paragraph from "Deploying 802.1x-Based Port Authentication on the Cisco ECT Solution". A little different scenario but the same goal in mind. See below the paragraph, and my question below it please:

PARAGRAPH READS:

"When a new IP host is connected to the switch port, the router initiates the communication using Extensible Authentication Protocol over LAN (EAPoL). The supplicant running on the device will respond to it. Then the router proceeds with further authentication. If there is no response from the device it is considered as a clientless device. Once the router gathers the credentials from the device, it is forwarded to the RADIUS server for authentication. If the credentials are valid, the port becomes enabled and gets attached to the trusted VLAN. If the credentials are invalid, the port is shut."

QUESTION:

From this sentance: "Then the router proceeds with further authentication.", what IS the authentication? What credentials are being sent from the client? Windows login? Mac-address? I dont know.

QUESTION 2:

From this sentance: "If the credentials are valid, the port becomes enabled and gets attached to the trusted VLAN."

Agan, what credentials? I dont think its Windows authentication, but I have no idea on what the client is sending?

ANY help would be appreciated. Thanks.