User Guide
Table Of Contents
- Chapter 1 – Getting Started
- Chapter 2 – System Status
- Chapter 3 – Quick Start
- Chapter 4 – System Management
- Chapter 5 – Port Management
- Chapter 6 – VLAN Management
- Chapter 7 - Spanning Tree Management
- Chapter 8 - MAC Address Management
- Chapter 9 – Multicast
- Chapter 10 - IP Interface
- Chapter 11 - IP Network Operations
- Chapter 12 – Security
- Chapter 13 - Access Control List
- Chapter 14 - Quality of Service
- Chapter 15 - Maintenance
- Chapter - 16 Support
161
2.
Select a port, and click Edit.
3.
Enter the parameters.
•
Interface—Select a port.
•
Port Control—Select the Administrative Port Authorization state.
o
Force Unauthorized—Denies the interface access by moving the interface
into the unauthorized state. The device does not provide authentication
services to the client through the interface.
o
Auto—Enables port-based authentication and authorization on the device.
The interface moves between an authorized or unauthorized state based
on the authentication exchange between the device and the client.
o
Force Authorized—Authorizes the interface without authentication.
•
Host Authentication Mode
o
Multiple Host (802.1x)—Supports port-based authentication with multiple
clients per port.
o
Multiple Sessions—Supports client-based authentication with multiple
clients per port.
•
RADIUS VLAN Assignment—Select to enable Dynamic VLAN assignment on the
selected port.
•
Guest VLAN—Select to indicate that the usage of a previously-defined guest
VLAN is enabled for the device. Enables using a guest VLAN for unauthorized
ports. If a guest VLAN is enabled, the unauthorized port automatically joins the
VLAN selected in the Guest VLAN ID field in the 802.1X Port Authentication page.
After an authentication failure, and if guest VLAN is activated globally on a given
port, the guest VLAN is automatically assigned to the unauthorized ports as an
Untagged VLAN.
•
802.1X Based Authentication—Select to enable 802.1X authentication on the
port.
•
MAC Based Authentication—Select to enabled MAC-based authentication on the
port. The port is authenticated based on the supplicant MAC address. Only 8 MAC-
based authentications can be used on the port.
Note
—For MAC authentication to succeed, the RADIUS server supplicant
username and password must be the supplicant MAC address. The MAC address
must be in lower case letters and entered without the . or - separators; for
example: 0020aa00bbcc.
•
Period Reauthentication—Select to enable port re-authentication attempts after
the specified Reauthentication Period.