User Manual

Managing Device Security
431
M6100 Web Management User Guide
• Control Mode - This selector lists the options for control mode. The control mode is
only set if the link status of the port is link up. The options are:
• force unauthorized - The authenticator port access entity (PAE) unconditionally
sets the controlled port to unauthorized
• force authorized - The authenticator PAE unconditionally sets the controlled port
to authorized.
• auto - The authenticator PAE sets the controlled port mode to reflect the outcome
of the authentication exchanges between the supplicant, authenticator, and the
authentication server.
• mac based - The authenticator PAE sets the controlled port mode to reflect the
outcome of the authentication exchanges between the supplicant, authenticator,
and the authentication server on a per supplicant basis.
• N/A - The control mode is not applicable.
• Use MAB to enable or disable MAC Based. The default selection is Disable. The
authenticator PAE sets the controlled port mode to reflect the outcome of the
authentication exchanges between the supplicant, authenticator, and the
authentication server on a per supplicant basis.
• Quiet Period - This input field allows the user to configure the quiet period for the
selected port. This command sets the value, in seconds, of the timer used by the
authenticator state machine on this port to define periods of time in which it will not
attempt to acquire a supplicant. The quiet period is the period for which the
authenticator does not attempt to acquire a supplicant after a failed authentication
exchange with the supplicant. The quiet period must be a number in the range of 0
and 65535. A quiet period value of 0 means that the authenticator state machine will
never acquire a supplicant. The default value is 60. Changing the value will not
change the configuration until the Apply button is pressed.
• Transmit Period - This input field allows the user to configure the transmit period for
the selected port. The transmit period is the value, in seconds, of the timer used by
the authenticator state machine on the specified port to determine when to send an
EAPOL EAP Request/Identity frame to the supplicant. The transmit period must be a
number in the range of 1 and 65535. The default value is 30. Changing the value will
not change the configuration until the Apply button is pressed.
• GuestVLAN ID - This field allows the user to configure Guest VLAN ID on the
interface. The valid range is 0-4093.The default value is 0. Changing the value will not
change the configuration until the Apply button is pressed. Enter 0 to clear the Guest
VLAN ID on the interface.
• Guest VLAN Period - This input field allows the user to enter the guest VLAN period
for the selected port. The guest VLAN period is the value, in seconds, of the timer
used by the GuestVLAN Authentication. The guest VLAN time-out must be a value in
the range of 1 and 300. The default value is 90. Changing the value will not change
the configuration until the Apply button is pressed.
• Unauthenticated VLAN ID - This input field allows the user to enter the
Unauthenticated VLAN ID for the selected port. The valid range is 0-4093.The default
value is 0. Changing the value will not change the configuration until the Submit
button is pressed. Enter 0 to clear the Unauthenticated VLAN ID on the interface.