User Manual

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports
Manage Device Security User Manual282
- MAC based. This mode allows multiple supplicants connected to the same port to
each authenticate individually. Each host connected to the port must authenticate
separately in order to gain access to the network. The hosts are distinguished by
their MAC addresses.
• MAB.
Specify whether to enable or disable MAC-based Authentication Bypass (MAB)
for
802.1x-unaware clients at the specified port. MAB only functions if the port control
mode is MAC-based. By default, MAB is disabled.
• Guest VLAN ID. Specify the VLAN ID for the guest VLAN. The range is from 0 to
4093.
The default value is 0. Enter 0 to reset the guest VLAN ID on the interface. The
guest VLAN allows the port to provide a distinguished service to unauthenticated
users, after three authentication failures. This feature provides a mechanism to allow
users access to hosts on the guest VLAN.
• Guest VLAN Period. Specify the time in seconds that the selected port remains in
the quiet state following a failed authentication exchange.
The
guest VLAN time-out
must be a value in the range from 1 to 300. The default value is 90 seconds.
• Unauthenticated VLAN ID. Specify
the VLAN ID of the unauthenticated VLAN for the
selected port. The range is from 0 to 4093. The default value is 0. Hosts that fail the
authentication might be denied access to the network or placed on a VLAN created
for unauthenticated clients. This VLAN might be configured with limited network
access.
• Periodic Reauthentication. Select Enable to allow periodic reauthentication of the
supplicant for the specified port. If you select Disable, connected clients are not
forced to reauthenticate periodically
.
The default is Disable.
• Reauthentication Period. Specify
the time in seconds after which reauthentication of
the supplicant occurs. The reauthentication period must be a value in the range from
1 to 65535. The default value is 3600 seconds.
• Quiet Period. Specify the time in seconds that the port remains in the quiet state
following a failed authentication exchange. While in the quite state, the port does not
attempt to acquire a supplicant. The quite state period must be
a value in the range
from 0 to 65535. A value of 0 means that the port remains in the quiet state and never
attempts to acquire a supplicant. The default value is 60 seconds.
• Resending EAP. Specify the EAP retransmit period for the selected port.
The
transmit period is the time in seconds, after which an EAPoL EA
P Request/Identify
frame is resent to the supplicant. The retransmit period must be a value in the range
from 1 to 65535. The default value is 30 seconds.
• MAX EAP Requests.
Specify
the maximum number of EAP requests for the selected
port. The value is the maximum number of times an EAPoL EAP Request/Identity
message is retransmitted before the supplicant times out. The maximum number of
EAP requests must be a value in the range from 1 to 10. The default value is 2.
• Supplicant Timeout. Specify the supplicant time-out for the selected port.
The
supplicant time-out is the time in seconds after which the supplicant times out.
The
supplicant time-out period must be a value in the range from 1 to 65535. The default
value is 30 seconds.