Here is a IEEE 802.1x network diagram example. The hub is optional, supplicant can connect straight to the authenticator itself. If using a Hub or an unmanaged switch, the uplink port (port to which the hub is connected to) should be set in multi session mode.