C
HAPTER
13
| Security Measures
Configuring 802.1X Port Authentication
– 390 –
before it times out the authentication session. (Range: 1-10;
Default: 2)
◆ Intrusion Action – Sets the port’s response to a failed authentication.
â–
Block Traffic – Blocks all non-EAP traffic on the port. (This is the
default setting.)
â–
Guest VLAN – All traffic for the port is assigned to a guest VLAN.
The guest VLAN must be separately configured (See "Configuring
VLAN Groups" on page 196) and mapped on each port (See
"Configuring Network Access for Ports" on page 332).
Supplicant List
◆ Supplicant – MAC address of authorized client.
Authenticator PAE State Machine
◆ State – Current state (including initialize, disconnected, connecting,
authenticating, authenticated, aborting, held, force_authorized,
force_unauthorized).
◆ Reauth Count – Number of times connecting state is re-entered.
◆ Current Identifier – Identifier sent in each EAP Success, Failure or
Request packet by the Authentication Server.
Backend State Machine
◆ State – Current state (including request, response, success, fail,
timeout, idle, initialize).
◆ Request Count – Number of EAP Request packets sent to the
Supplicant without receiving a response.
◆ Identifier (Server) – Identifier carried in the most recent EAP
Success, Failure or Request packet received from the Authentication
Server.
Reauthentication State Machine
◆ State – Current state (including initialize, reauthenticate).
WEB INTERFACE
To configure port authenticator settings for 802.1X:
1. Click Security, Port Authentication.
2. Select Configure Interface from the Step list.
3. Click Authenticator.
4. Modify the authentication settings for each port as required.