User Manual

Manage Device Security
205
NETGEAR 24-Port Gigabit Smart Managed Pro Switch with PoE+ and 2 SFP Ports Model GS724TPv2
- Unauthorized. The system denies the selected interface system access by
moving the interface into unauthorized state. The switch cannot provide
authentication services to the client through the interface.
- MAC based. This mode allows multiple supplicants connected to the same port to
each authenticate individually. Each host connected to the port must authenticate
separately in order to gain access to the network. The hosts are distinguished by
their MAC addresses.
• Guest VLAN ID. Specify the VLAN ID for the guest VLAN. The valid range is 0–4093.
The default is 0. Enter 0 to reset the guest VLAN ID on the interface. The guest VLAN
allows the port to provide a distinguished service to unauthenticated users, after three
authentication failures. This feature provides a mechanism to allow users access to
hosts on the guest VLAN.
• Guest VLAN Period. Specify the number of seconds that the selected port remains in
the quiet state following a failed authentication exchange. The guest VLAN time-out
must be a value in the range of 1–300. The default is 90.
• Periodic Reauthentication. Select Enable to allow periodic reauthentication of the
supplicant for the specified port.
• Reauthentication Period. Specify the time, in seconds, after which reauthentication
of the supplicant occurs. The reauthentication period must be a value in the range of
1–65535. The default is 3600. If this field is disabled, connected clients are not forced
to reauthenticate periodically.
• Quiet Period. Specify the number of seconds that the port remains in the quiet state
following a failed authentication exchange. While in the quite state, the port does not
attempt to acquire a supplicant.
• Resending EAP. Specify the EAP retransmit period for the selected port. The
transmit period is the value, in seconds, after which an EAPoL EAP Request/Identify
frame is resent to the supplicant.
• Max EAP Requests. Specify the maximum number of EAP requests for the selected
port. The value is the maximum number of times an EAPoL EAP Request/Identity
message is retransmitted before the supplicant times out.
• Supplicant Timeout. Specify the supplicant time-out for the selected port. The
supplicant time-out is the value, in seconds, after which the supplicant times out.
• Server Timeout. Specify the time that elapses before the switch resends a request to
the authentication server.
8. Click the Apply button.
The updated configuration is sent to the switch. Configuration changes take effect
immediately.