User's Manual
Table Of Contents
- Contents
- Figures
- Preface
- Chapter 1
- AlliedWare Plus™ Version 2.1.2 Web Browser Interface
- Chapter 2
- Starting a Management Session
- Chapter 3
- Basic Switch Parameters
- Setting the System Date and Time
- Setting a Telnet or SSH Server
- Setting a Remote Log Server
- Setting the Switch Information
- Setting the Configuration File
- Managing User Accounts
- Rebooting a Switch
- Upgrading the Software
- Returning the AlliedWare Plus Management Software to the Factory Default Values
- Displaying System Information
- Chapter 4
- Setting Port Parameters
- Chapter 5
- Setting Port Statistics
- Chapter 6
- Setting Port Mirroring
- Chapter 7
- Setting the Port Spanning Tree Protocol
- Chapter 8
- Setting the MAC Address
- Chapter 9
- Setting LACP
- Chapter 10
- Setting Static Port Trunks
- Chapter 11
- Setting Port-based and Tagged VLANs
- Chapter 12
- Setting Switch Spanning Tree Protocols
- Chapter 13
- Setting Internet Group Management Protocol (IGMP) Snooping
- Chapter 14
- Setting MAC Address-based Port Security
- Chapter 15
- Setting RADIUS and TACACS+ Clients
- Chapter 16
- Setting 802.1x Port-based Network Access
- Chapter 17
- Setting IPv4 and IPv6 Management
- Chapter 18
- Setting LLDP and LLDP-MED
- Chapter 19
- Setting sFlow
Chapter 16: Setting 802.1x Port-based Network Access
180
5. Modify the following fields as needed:
Port Id— Indicates the port number.
Port Role— Indicates that you’ve selected the port as an
Authenticator.
Authentication Mode— Indicates the authentication mode.
Choose from the following:
Unauthorized Sets the port to the 802.1x
authenticator role, in the unauthorized
state. Although the port is in the
authenticator role, the switch blocks all
authentication on the port. If you set all
the ports on the switch to this setting,
then no clients can log on and forward
packets through them.
Force-authorized Sets port to the 802.1x authenticator
role, in the force-authorized state. A
port in the force-authorized state
transitions to the authorized state
without any authentication exchanges
required. The port transmits and
receives traffic normally without
802.1X-based authentication of the
clients.
Auto Sets the port to the 802.1X port-based
authenticator role. A port in this state
begins in the unauthorized state,
forwarding only EAPOL frames, until a
client has logged on successfully.
Timeouts
The following fields set the timers for this feature:
Quiet Period— Sets the number of seconds that an authenticator
port remains in the quiet state following a failed authentication
exchange with a client. The range is 0 to 65,535 seconds. The
default value is 60 seconds.
Tx-period— Sets the number of seconds an authenticator port
waits for a response to an EAP-request/identity frame from a client
before retransmitting the request. The default value is 30 seconds.
The range is 1 to 65,535 seconds.
Reauth-period— Specifies the time interval that an authenticator
port requires a client to reauthenticate. The range is 1 to 65,535
seconds. The default value is 4,294,967,295 seconds.