User Guide

Configuring 802.1x Security 121
Chapter 11
Configuring the Authentication Servers
The Authentication server to which the switch will send authentication
requests needs to be configured in addition to the 802.1x settings.
1. Click Add under the Authentication Server to add a radius server to the 801.x
setting.
Enable
Authentication
To select 802.1x as an
authentication method
this field needs to be
checked. Default:
Unchecked
Checkbox Select this box
Enable
Re-authenticat
ion
When set this will force
the client to do a 802.1x
re-authentication after
the expiry of the default
timer for
re-authentication. The
default value of the
timer is 24 hours. If the
user fails to
re-authenticate will valid
credentials, the state of
the user is cleared.
If derivation rules are
used to classify dot1x
users then the
Re-authentication timer
per role will over-ride
this setting.
Default: Unchecked
Checkbox Select this box
only if
re-authentication
needs to be
enabled. The
re-authentication
timer can also be
modified if
required as
explained in
Advanced
Configuration
options of
802.1x.
Authentication
Failure
Threshold for
Station
Blacklisting
This is a security
feature. This specifies
the number of times a
user can try to login
with wrong credentials
after which the user will
be blacklisted as a
security threat. Default:
3
Integer Set value to 0 to
disable
blacklisting.
Set to a non zero
integer value to
blacklist after the
specified number
of failures.