Configuring Device Security
Defining 802.1x
ESW 500 Series Switches Administration Guide 140
5
-
802.1x & MAC
— Enables 802.1x + MAC Authentication on the device. In
the case of 802.1x + MAC, 802.1x takes precedence.
• Periodic Reauthentication — Enables port reauthentication. The default value is
disabled.
• Reauthentication Period — Specifies the number of seconds in which the
selected port is reauthenticated (Range: 300-4294967295). The field default is
3600 seconds.
• Authenticator State — Specifies the port authorization state. The possible field
values are as follows:
-
Force-Authorized
— Indicates the controlled port state is set to Force-
Authorized (forward traffic).
-
Force-Unauthorized
— Indicates the controlled port state is set to Force-
Unauthorized (discard traffic).
-
Initialize
— Enables port-based authentication on the device. The
interface moves between an authorized or unauthorized state based on
the authentication exchange between the device and the client.
• Quiet Period — Specifies the number of seconds that the switch remains in the
quiet state following a failed authentication exchange (Range: 0-65535).
• Resending EAP — Specifies the number of seconds that the switch waits for a
response to an EAP - request/identity frame, from the supplicant (client), before
resending the request.
• Max EAP Requests — Indicates the total amount of EAP requests sent. If a
response is not received after the defined period, the authentication process is
restarted. The field default is 2 retries.
• Supplicant Timeout — Displays the number of seconds that lapses before EAP
requests are resent to the supplicant (Range: 1-65535). The field default is 30
seconds.
• Server Timeout — Specifies the number of seconds that lapses before the
switch resends a request to the authentication server (Range: 1-65535). The
field default is 30 seconds.
• Termination Cause — Indicates the reason for which the port authentication
was terminated.
STEP 2 Define the relevant fields
To Next Page
Loading...
Need help?
General