User's Manual

Networking
Port Management
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 98
4
• Speed: Choose one of these options: AUTO, 10 Mbps, 100 Mbps, and 1000
Mbps. The default is AUTO for all ports. The AUTO option lets the system and
network determine the optimal port speed.
• Duplex: Choose either Half Duplex or Full Duplex based on the port support.
The default is Full Duplex for all ports.
- Full: Indicates that the port supports transmissions between the device
and the client in both directions simultaneously.
- Half: Indicates that the port supports transmissions between the device
and the client in only one direction at a time.
STEP 4 Click OK to save your settings.
STEP 5 Repeat the above steps to edit the settings for other physical ports.
STEP 6 Click Save to apply your settings.
Configuring 802.1X Access Control on Physical Ports
Port-Based Access Control configures IEEE 802.1X port-based authentication to
prevent unauthorized devices (802.1X-capable clients) from gaining access to the
network.
The IEEE 802.1X standard defines a client-server-based access control and
authentication protocol that restricts unauthorized devices from connecting to a
LAN through publicly accessible ports. The authentication server authenticates
each client (supplicant in Windows 2000, XP, Vista, Windows 7, and Mac OS)
connected to a port before making available any service offered by the security
appliance or the LAN.
Until the client is authenticated, 802.1X access control allows only Extensible
Authentication Protocol over LAN (EAPOL) traffic through the port to which the
client is connected. After authentication is successful, normal traffic can pass
through the port.
This feature simplifies the security management by allowing you to control access
from a master database in a single server (although you can use up to three
RADIUS servers to provide backups in case access to the primary server fails). It
also means that user can enter the same authorized RADIUS username and
password pair for authentication, regardless of which switch is the access point
into the LAN.