User guide

244 Configuring Device Information
• Port Based Authentication State — Permits port based authentication on the device. The possible
field values are:
–
Enable — Enables port based authentication on the device.
–
Disable — Disables port based authentication on the device.
•
Authentication Method — The Authentication method used. The possible field values are:
–
None — No authentication method is used to authenticate the port.
–
RADIUS — Port authentication is performed using the RADIUS server.
–
RADIUS, None — Port authentication is performed first using the RADIUS server. If the port is
not authenticated, then no authentication method is used, and the session is permitted.
•
Guest VLAN — Specifies whether the Guest VLAN is enabled on the device. The possible field
values are:
–
Enable — Enables using a Guest VLAN for unauthorized ports. If a Guest VLAN is enabled,
the unauthorized port automatically joins the VLAN selected in the VLAN List field.
–
Disable — Disables port-based authentication on the device. This is the default.
•
VLAN List — When Guest VLAN is enabled, this field specifies which VLAN the guest will belong to.
•
Interface — Contains an interface list.
•
User Name — The user name as configured in the RADIUS server.
•
Admin Interface Control — Defines the port authorization state. The possible field values are:
–
Authorized — Set the interface state to authorized (permit traffic).
–
Unauthorized — Set the interface state to unauthorized (deny traffic).
–
Auto — Authorize state is set by the authorization method.
•
Current Interface Control — The currently configured port authorization state.
• Authentication Type — Specifies the type of authentication on the port. The possible field values are:
–
802.1x Only — Sets the authentication type to 802.1x based authentication only.
–
MAC Only — Sets the authentication type to MAC based authentication only.
–
802.1x & MAC — Sets the authentication type to 802.1x based authentication and MAC based
authentication.
•
Dynamic VLAN Assignment — Indicates whether dynamic VLAN assignment is enabled for this port.
This feature allows network administrators to automatically assign users to VLANs during the RADIUS
server authentication. When a user is authenticated by the RADIUS server, the user is automatically
joined to the VLAN configured on a RADIUS server.
– Port Lock and Port Monitor should be disabled when DVA is enabled.
– Dynamic VLAN Assignment (DVA) can occur only if a RADIUS server is configured, and port
authentication is enabled and set to 802.1x multi-session mode.
– If the Radius Accept Message doesn’t contain the supplicant’s VLAN, the supplicant is rejected.