User Manual

8-Port Gigabit (PoE+) Ethernet Smart Managed Pro Switch with (2 SFP or 2 Copper Ports and)
Cloud Management
Manage Device Security User Manual334
separately in order to gain access to the network. The hosts are distinguished by
their MAC addresses.
• MAB. Specify whether to enable or disable MAC-based Authentication Bypass (MAB)
for
802.1x-unaware clients at the specified port. MAB only functions if the port control
mode is MAC-based. By default, MAB is disabled.
• Guest VLAN ID. Specify the VLAN ID for the guest VLAN. The range is from 0 to
4093.
The default value is 0. Enter 0 to reset the guest VLAN ID on the interface. The
guest VLAN allows the port to provide a distinguished service to unauthenticated
users, after three authentication failures. This feature provides a mechanism to allow
users access to hosts on the guest VLAN.
• Guest VLAN Period. Specify the time in seconds that the selected port remains in
the quiet state following a failed authentication exchange.
The
guest VLAN time-out
must be a value in the range from 1 to 300. The default value is 90.
• Unauthenticated VLAN ID. Specify
the VLAN ID of the unauthenticated VLAN for the
selected port. The range is from 0 to 4093. The default value is 0. Hosts that fail the
authentication might be denied access to the network or placed on a VLAN created
for unauthenticated clients. This VLAN might be configured with limited network
access.
• Periodic Reauthentication. Select Enable to allow periodic reauthentication of the
supplicant for the specified port.
• Reauthentication Period.
Specify the time in seconds after which reauthentication of
the supplicant occurs. The reauthentication period must be a value in the range from
1 to 65535. The default value is 3600. If this field is disabled, connected clients are
not forced to reauthenticate periodically.
• Quiet Period. Specify the time in seconds that the port remains in the quiet state
following a failed authentication exchange. While in the quite state, the port does not
attempt to acquire a supplicant.
• Resending EAP. Specify the EAP retransmit period for the selected port.
The
transmit period is the time in seconds, after which an EAPoL EAP Request/Identify
frame is resent to the supplicant.
• MAX EAP Requests. Specify
the maximum number of EAP requests for the selected
port. The value is the maximum number of times an EAPoL EAP Request/Identity
message is retransmitted before the supplicant times out.
• Supplicant Timeout. Specify the supplicant time-out for the selected port. The
supplicant time-out is the time in seconds after which the supp
licant times out.
• Server Timeout. Specify
the time that elapses before the switch resends a request to
the authentication server.
10. Click the Apply
button.
Your settings are saved.