Loading ...
Loading ...
Loading ...
Manage Device Security
276
Insight Managed 28-Port and 52-Port Gigabit Ethernet Smart Cloud Switches
8. Specify the following settings:
• Port Control. Defines the port authorization state. The control mode is set only if the
link status of the port is link up. Select one of the following options:
- Auto. The switch automatically detects the mode of the interface.
- Authorized. The switch places the interface into an authorized state without being
authenticated. The interface sends and receives normal traffic without client
port-based authentication.
- Unauthorized. The switch denies the selected interface access by moving the
interface into unauthorized state. The switch cannot provide authentication
services to the client through the interface.
- MAC based. Multiple supplicants connected to the same port are allowed to be
authenticated individually. Each host connected to the port must de authenticated
separately to gain access to the network. The hosts are distinguished by their
MAC addresses.
• MAB. Specify whether to enable or disable MAC-based Authentication Bypass (MAB)
for 802.1x-unaware clients at the specified port. MAB only functions if the port control
mode is MAC-based. By default, MAB is disabled.
• Guest VLAN ID. Specify the VLAN ID for the guest VLAN. The valid range is 0–4093.
The default value is 0. Enter 0 to reset the guest VLAN ID on the interface. The guest
VLAN allows the port to provide a distinguished service to unauthenticated users.
This feature provides a mechanism to allow users access to hosts on the guest VLAN.
• Guest VLAN Period. Specify the number of seconds that the selected port remains in
the quiet state following a failed authentication exchange. The guest VLAN time-out
must be a value in the range of 1–300. The default value is 90.
• Unauthenticated VLAN ID. Specify the VLAN ID of the unauthenticated VLAN for the
selected port. The valid range is 0–3965. The default value is 0. Hosts that fail the
authentication might be denied access to the network or placed on a VLAN created
for unauthenticated clients. This VLAN might be configured with limited network
access.
• Periodic Reauthentication. Select Enable to allow periodic reauthentication of the
supplicant for the specified port.
• Reauthentication Period. Specify the time, in seconds, after which reauthentication
of the supplicant occurs. The reauthentication period must be a value in the range of
1–65535. The default value is 3600. If this field is disabled, connected clients are not
forced to reauthenticate periodically.
• Quiet Period. Specify the number of seconds that the port remains in the quiet state
following a failed authentication exchange. While in the quite state, the port does not
attempt to acquire a supplicant.
• Resending EAP. Specify the EAP retransmit period for the selected port. The
transmit period is the value, in seconds, after which an EAPoL EAP Request/Identify
frame is resent to the supplicant.
• Max EAP Requests. Specify the maximum number of EAP requests for the selected
port. The value is the maximum number of times an EAPoL EAP Request/Identity
message is retransmitted before the supplicant times out.
Loading ...
Loading ...
Loading ...