User Guide

Managing Device Security
196
GS716Tv3, GS724Tv4, and GS748Tv5 Smart Switches
- Unauthorized. The system denies the selected interface system access by
moving the interface into unauthorized state. The switch cannot provide
authentication services to the client through the interface.
- MAC based. This mode allows multiple supplicants connected to the same port to
each authenticate individually. Each host connected to the port must authenticate
separately in order to gain access to the network. The hosts are distinguished by
their MAC addresses.
• Guest VLAN ID. Specify the VLAN ID for the guest VLAN. The guest VLAN allows the
port to provide a distinguished service to unauthenticated users. This feature provides
a mechanism to allow users access to hosts on the guest VLAN.
• Guest VLAN Period. Specify the number of seconds that the port remains in the
quiet state following a failed authentication exchange.
• Unathenticated VLAN ID. Specify the VLAN ID of the unauthenticated VLAN. Hosts
that fail the authentication might be denied access to the network or placed on a
VLAN created for unauthenticated clients. This VLAN might be configured with limited
network access.
• Periodic Reauthentication. Select Enable to allow periodic reauthentication of the
supplicant for the specified port.
• Reauthentication Period. Specify the amount of time that clients can be connected
to the port without being reauthenticated. If this field is disabled, connected clients are
not forced to reauthenticate periodically.
• Quiet Period. Specify the number of seconds that the port remains in the quiet state
following a failed authentication exchange.While in the quite state, the port does not
attempt to acquire a supplicant.
• Resending EAP. Specify the transmit period for the selected port. The transmit period
is the value, in seconds, of the timer used by the authenticator state machine on the
specified port to determine when to send an EAPOL EAP Request/Identify frame to
the supplicant.
• Max EAP Requests. Specify the maximum requests for the selected port. The
maximum requests value is the maximum number of times the authenticator state
machine on this port will retransmit an EAPOL EAP Request/Identity before timing out
the supplicant.
• Supplicant Timeout. Specify the supplicant time-out for the selected port. The
supplicant time-out is the value, in seconds, of the timer used by the authenticator
state machine on this port to time-out the supplicant.
• Server Timeout. Specify the amount of time that lapses before the switch resends a
request to the authentication server.
4. Click the Apply button.