Allied Telesis AT-9000/28SP Command Line User's Guide

AT-9000 Switch Command Line User’s Guide
Section VIII: Port Security 727
Single Host Mode Here are the operating characteristics for the switch when an authenticator
port is set to the single host mode:
 If the switch receives a valid VLAN ID or VLAN name from the RADIUS
server, it moves the authenticator port to the designated guest VLAN
and changes the port to the authorized state. Only the authenticated
supplicant is allowed to use the port. All other supplicants are denied
entry.
 If the switch receives an invalid VLAN ID or VLAN name from the
RADIUS server (e.g., the VID of a nonexistent VLAN), it leaves the port
in the unauthorized state to deny access to the port.
Multiple Host
Mode
Here are the operating characteristics for the switch when an authenticator
port is set to the multiple host mode:
 If the switch receives a valid VLAN ID or VLAN name from the RADIUS
server, it moves the authenticator port to the designated VLAN and
changes the port to the authorized state. All clients are allowed access
to the port and the same VLAN after the initial authentication.
 If the switch receives an invalid VLAN ID or VLAN name from the
RADIUS server (e.g., the VID of a nonexistent VLAN), it leaves the port
in the unauthorized state to deny access to the port.
Multiple
Supplicant Mode
The initial authentication on an authenticator port running in the multiple
supplicant mode is handled in the same fashion as with the Single
operating mode. If the switch receives a valid VLAN ID or name from the
RADIUS server, it moves the authenticator port to the designated VLAN
and changes the port to the authorized state.
How the switch handles subsequent authentications on the same port
depends on how you set the Secure VLAN parameter. Your options are as
follows:
 If you activate the Secure VLAN feature, only those supplicants with
the same VLAN assignment as the initial supplicant are authenticated.
Supplicants with different VLAN assignments or with no VLAN
assignment are denied access to the port.
 If you disable the Secure VLAN feature, all supplicants, regardless of
their assigned VLANs, are authenticated. However, the port remains in
the VLAN specified in the initial authentication.
Supplicant VLAN
Attributes on the
RADIUS Server
The following information must be entered as part of a supplicant’s
account on the RADIUS server when associating a supplicant to a VLAN.
 Tunnel-Type
The protocol to be used by the tunnel specified by Tunnel-Private-
Group-Id. The only supported value is VLAN (13).

Allied Telesis AT-9000/28SP Specifications

General

Number of Ports	28
Port Type	Gigabit Ethernet
Ports	24 x 10/100/1000Base-T, 4 x SFP
Switching Capacity	56 Gbps
Forwarding Rate	41.7 Mpps
Power over Ethernet (PoE)	No
Rack Mountable	Yes
Product Type	Switch
Layer	3
MAC Address Table Size	16K
VLANs	4K
Jumbo Frames	9K
Dimensions (W x D x H)	440 x 240 x 44 mm
Power Supply	AC 100-240V, 50/60Hz
Operating Temperature	0°C to 40°C
Storage Temperature	-40°C to 70°C
Humidity	10% to 90% (non-condensing)