C
HAPTER
13
| Security Measures
Configuring 802.1X Port Authentication
– 316 –
CONFIGURING PORT
SETTINGS FOR 802.1X
Use the Security > Port Authentication (Configure Interface) page to
configure 802.1X port settings for the switch as the local authenticator.
When 802.1X is enabled, you need to configure the parameters for the
authentication process that runs between the client and the switch (i.e.,
authenticator), as well as the client identity lookup process that runs
between the switch and authentication server.
CLI REFERENCES
â—† "802.1X Port Authentication" on page 693
COMMAND USAGE
When the switch functions as a local authenticator between supplicant
devices attached to the switch and the authentication server, configure the
parameters for the exchange of EAP messages between the authenticator
and clients.
PARAMETERS
These parameters are displayed in the web interface:
◆ Port – Port number.
◆ Status – Indicates if authentication is enabled or disabled on the port.
The status is disabled if the control mode is set to Force-Authorized.
◆ Authorized – Displays the 802.1X authorization status of connected
clients.
â–
Yes – Connected client is authorized.
â–
No – Connected client is not authorized.
◆ Supplicant – Indicates the MAC address of a connected client.
◆ Control Mode – Sets the authentication mode to one of the following
options:
â–
Auto – Requires a dot1x-aware client to be authorized by the
authentication server. Clients that are not dot1x-aware will be
denied access.
â–
Force-Authorized – Forces the port to grant access to all clients,
either dot1x-aware or otherwise. (This is the default setting.)
â–
Force-Unauthorized – Forces the port to deny access to all
clients, either dot1x-aware or otherwise.
◆ Operation Mode – Allows single or multiple hosts (clients) to connect
to an 802.1X-authorized port. (Default: Single-Host)
â–
Single-Host – Allows only a single host to connect to this port.
â–
Multi-Host – Allows multiple host to connect to this port.
To Next Page
Loading...
Need help?
General
