Web Configuration
3-29
Configuring 802.1X
Use the 802.1X Configuration page to specify global or port-specific parameters for
the IEEE 802.1X Port Authentication Protocol.
Field Attributes
System Setting
• Mode - Enables or disables 802.1X globally for all ports on the switch. The 802.1X
protocol must be enabled globally for the switch before the port settings are active.
(Default: Disabled)
• RADIUS IP - Address of authentication server.
• RADIUS UDP Port - Network port of authentication server used for authentication
messages. (Range: 1-65535; Default: 1812)
• RADIUS Secret - Sets the text string used for encryption between the switch and
the RADIUS server. This key is used to authenticate logon access for the client.
Do not use blank spaces in the string. (Maximum length: 48 characters)
• Reauthentication Enabled - Sets the client to be re-authenticated after the
interval specified by the Re-authentication Period. Re-authentication can be used
to detect if a new device is plugged into a switch port. (Default: Disabled)
• Reauthentication Period - Sets the time period after which a connected client
must be re-authenticated. (Range: 1-3600 seconds; Default: 3600 seconds)
• EAP timeout - The time the switch shall wait for the supplicant response before
re-transmitting a packet. (Range: 1-255; Default: 30 seconds
Port Settings
• Port - The port number.
• Admin State - Sets the authentication mode to one of the following options:
- Auto - Requires a 802.1X-aware client to be authorized by the authentication
server. Clients that are not 802.1X-aware will be denied access.
- Force-Authorized - Forces the port to grant access to all clients, either
802.1X-aware or otherwise. (This is the default setting.)
- Force-Unauthorized - Forces the port to deny access to all clients, either
802.1X-aware or otherwise.
• Port State - Administrative state for port access control.
• Reset - The two available options include:
- Re-Authenticate - Schedules a reauthentication to whenever the quiet-period
of the port runs out.
- Force-Reinitialize - Bypasses the quiet-period of the port and enables
immediate reauthentication regardless of the status for the quiet-period.
The re-authentication process verifies the connected client’s user ID and password
on the RADIUS server. During re-authentication, the client remains connected the
network and the process is handled transparently by the dot1x client software. Only
if re-authentication fails is the port blocked.
To Next Page
Loading...
Need help?
General