Web Management Guide-R03

Chapter 12 | Security Measures
Configuring 802.1X Port Authentication
– 331 –
◆ This switch can be configured to serve as the authenticator on selected ports
by setting the Control Mode to Auto on the Authenticator configuration page,
and as a supplicant on other ports by the setting the control mode to Force-
Authorized on that configuration page and enabling the PAE supplicant on the
Supplicant configuration page.
Parameters
These parameters are displayed:
◆ Port – Port number.
◆ PAE Supplicant – Enables PAE supplicant mode. (Default: Disabled)
If the attached client must be authenticated through another device in the
network, supplicant status must be enabled.
Supplicant status can only be enabled if PAE Control Mode is set to “Force-
Authorized” on this port (see “Configuring Port Authenticator Settings for
802.1X” on page 326).
PAE supplicant status cannot be enabled if a port is a member of trunk or LACP
is enabled on the port.
◆ Authentication Period – The time that a supplicant port waits after the
Maximum Start count (described below) has been exceeded for a response
from the authenticator. (Range: 1-65535 seconds; Default: 30 seconds)
◆ Held Period – The time that a supplicant port waits before resending its
credentials to find a new an authenticator. (Range: 1-65535 seconds;
Default: 60 seconds)
◆ Start Period – The time that a supplicant port waits before resending an
EAPOL start frame to the authenticator. (Range: 1-65535 seconds; Default: 30
seconds)
◆ Maximum Start – The maximum number of times that a port supplicant will
send an EAP start frame to the client before assuming that the client is 802.1X
unaware. (Range: 1-65535; Default: 3)
◆ Authenticated – Shows whether or not the supplicant has been authenticated.