Using the BayStack 450 10/100/1000 Series Switch
1-24 309978-D Rev 01
When the Authentication server returns a “success” or “failure” message, the
controlled port’s state is changed accordingly. If the authorization is successful,
the controlled port’s operational state is set to Forwarding. Otherwise, the
controlled port’s state depends on the Operational Traffic Control field value in
the EAPOL Security Configuration screen (see
Figure 3-16 on page 3-41).
The Operational Traffic Control field can have one of the following two values:
• Incoming and Outgoing -- If the controlled port is unauthorized, frames are
not transmitted through the port; all frames received on the controlled port are
discarded. The controlled port’s state is set to Blocking.
• Incoming -- If the controlled port is unauthorized, frames received on the port
are discarded, but the transmit frames are forwarded through the port.
Dynamic VLAN Assignment
If EAPOL-based security is enabled on a port, and then the port is authorized, the
EAPOL feature dynamically changes the port’s VLAN configuration according to
preconfigured values, and assigns a new VLAN. The new VLAN configuration
values are applied according to previously stored parameters (based on the
user_ID) in the Authentication server (see
“Setting Up the Authentication Server”
following this section).
The following VLAN configuration values are affected:
• Port Membership
•PVID
• Port Priority
When the EAPOL-based security is disabled on a port that was previously
authorized, the port’s VLAN configuration values are restored directly from the
switch’s nonvolatile random access memory (NVRAM).
The following exceptions apply to dynamic VLAN assignments:
• The dynamic VLAN configuration values assigned by EAPOL are not stored
in the switch’s NVRAM.
• You can overide the dynamic VLAN configuration values assigned by
EAPOL; however, the values you configure are not stored in NVRAM.
To Next Page
Loading...
Need help?
General