User Manual

24-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports
Manage Device Security User Manual279
• MAB. Specify whether to enable or disable MAC-based Authentication Bypass (MAB)
for 802.1x-unaware clients at the specified port. MAB only functions if the port control
mode is MAC-based. By default, MAB is disabled.
• Guest VLAN ID. Specify the VLAN ID for the guest VLAN.
The range is from 0 to
4093.
The default value is 0. Enter 0 to reset the guest VLAN ID on the interface. The
guest VLAN allows the port to provide a distinguished service to unauthenticated
users, after three authentication failures. This feature provides a mechanism to allow
users access to hosts on the guest VLAN.
• Guest VLAN Period. Specify the time in seconds that the selected port remains in
the quiet state following a failed authentication exchange.
The
guest VLAN time-out
must be a value in the range from 1 to 300. The default value is 90 seconds.
• Unauthenticated VLAN ID. Specify
the VLAN ID of the unauthenticated VLAN for the
selected port. The range is from 0 to 4093. The default value is 0. Hosts that fail the
authentication might be denied access to the network or placed on a VLAN created
for unauthenticated clients. This VLAN might be configured with limited network
access.
• Periodic Reauthentication. Select Enable to allow periodic reauthentication of the
supplicant for the specified port. If you select Disable, connected clients are not
forced to reauthenticate periodically
.
The default is Disable.
• Reauthentication Period. Specify
the time in seconds after which reauthentication of
the supplicant occurs. The reauthentication period must be a value in the range from
1 to 65535. The default value is 3600 seconds.
• Quiet Period. Specify the time in seconds that the port remains in the quiet state
following a failed authentication exchange. While in the quite state, the port does not
attempt to acquire a supplicant. The quite state period must be
a value in the range
from 0 to 65535. A value of 0 means that the port remains in the quiet state and never
attempts to acquire a supplicant. The default value is 60 seconds.
• Resending EAP. Specify the EAP retransmit period for the selected port.
The
transmit period is the time in seconds, after which an EAPoL EA
P Request/Identify
frame is resent to the supplicant. The retransmit period must be a value in the range
from 1 to 65535. The default value is 30 seconds.
• MAX EAP Requests.
Specify
the maximum number of EAP requests for the selected
port. The value is the maximum number of times an EAPoL EAP Request/Identity
message is retransmitted before the supplicant times out. The maximum number of
EAP requests must be a value in the range from 1 to 10. The default value is 2.
• Supplicant Timeout. Specify the supplicant time-out for the selected port.
The
supplicant time-out is the time in seconds after which the supplicant times out.
The
supplicant time-out period must be a value in the range from 1 to 65535. The default
value is 30 seconds.
• Server Timeout. Specify the time in seconds that elapses before the switch resends
a request to the authentication server
.
The server time-out period must be a value in
the range from 1 to 65535. The default value is 30 seconds.
10. Click the Apply button.
Your settings are saved.