User manual

APS User Manual
275
whether the client is still attached or not, and the only way to free any
resources is to age the entry.
Hold Time: This setting applies to the following modes, i.e. modes using the Port
Security functionality to secure MAC addresses:
• Single 802.1X
• Multi 802.1X
• MAC-Based Auth.
If a client is denied access - either because the RADIUS server denies the
client access or because the RADIUS server request times out (according to
the timeout specified on the "Configuration→Security→AAA" page) - the
client is put on hold in the Unauthorized state. The hold timer does not
count during an on-going authentication.
In MAC-based Auth. mode, the switch will ignore new frames coming from
the client during the hold time.
The Hold Time can be set to a number between 10 and 1000000 seconds.
RADIUS-Assigned QoS Enabled: RADIUS-assigned QoS provides a means to centrally control the
traffic class to which traffic coming from a successfully authenticated
supplicant is assigned on the switch. The RADIUS server must be configured
to transmit special RADIUS attributes to take advantage of this feature (see
RADIUS-Assigned QoS Enabled below for a detailed description)
The "RADIUS-Assigned QoS Enabled" checkbox provides a quick way to
globally enable/disable RADIUS-server assigned QoS Class functionality.
When checked, the individual ports' ditto setting determine whether
RADIUS-assigned QoS Class is enabled on that port. When unchecked,
RADIUS-server assigned QoS Class is disabled on all ports.
RADIUS-Assigned VLAN Enabled: RADIUS-assigned VLAN provides a means to centrally control the
VLAN on which a successfully authenticated supplicant is placed on the
switch. Incoming traffic will be classified to and switched on the RADIUS-
assigned VLAN. The RADIUS server must be configured to transmit special
RADIUS attributes to take advantage of this feature (see RADIUS-Assigned
VLAN Enabled below for a detailed description).
The "RADIUS-Assigned VLAN Enabled" checkbox provides a quick way to
globally enable/disable RADIUS-server assigned VLAN functionality. When
checked, the individual ports' ditto setting determine whether RADIUS-