User Manual

Manage Device Security
304
M4100 Series Managed Switch
You can select multiple check boxes to apply the same settings to the selected ports, or
select the check box in the heading row to apply the same settings to all ports.
9. For the selected port(s), specify the following settings:
• Control Mode. This selector lists the options for control mode. The control mode is set
only if the link status of the port is link up. The options are as follows:
- force unauthorized. The authenticator port access entity (PAE) unconditionally
sets the controlled port to unauthorized.
- force authorized. The authenticator PAE unconditionally sets the controlled port
to authorized.
- auto. The authenticator PAE sets the controlled port mode to reflect the outcome
of the authentication exchanges between the supplicant, authenticator, and the
authentication server.
- mac based. The authenticator PAE sets the controlled port mode to reflect the
outcome of the authentication exchanges between the supplicant, authenticator,
and the authentication server on a per supplicant basis.
- N/A. The control mode is not applicable.
• Use MAB to enable or disable MAP. The default selection is Disable.
• Quiet Period. This input field allows the user to configure the quiet period for the
selected port. This command sets the value, in seconds, of the timer used by the
authenticator state machine on this port to define periods of time in which it does not
attempt to acquire a supplicant. The quiet period is the period for which the
authenticator does not attempt to acquire a supplicant after a failed authentication
exchange with the supplicant. The quiet period must be a number in the range of 0 to
65535. A quiet period value of 0 means that the authenticator state machine never
acquires a supplicant. The default value is 60. Changing the value does not change
the configuration until the APPLY button is clicked.
• Transmit Period. This input field allows the user to configure the transmit period for
the selected port. The transmit period is the value, in seconds, of the timer used by
the authenticator state machine on the specified port to determine when to send an
EAPOL EAP Request/Identity frame to the supplicant. The transmit period must be a
number in the range of 1 to 65535. The default value is 30. Changing the value does
not change the configuration until the APPLY button is clicked.
• GuestVLAN ID. This field allows the user to configure the guest VLAN ID on the
interface. The valid range is 0 to 4093.The default value is 0. Changing the value
does not change the configuration until the APPLY button is clicked. Enter 0 to clear
the guest VLAN ID on the interface.
• Guest VLAN Period. This input field allows the user to enter the guest VLAN period
for the selected port. The guest VLAN period is the value, in seconds, of the timer
used by the GuestVlan authentication. The guest VLAN time-out must be a value in
the range of 1 to 300. The default value is 90. Changing the value does not change
the configuration until the APPLY button is clicked.
• Unauthenticated VLAN ID. This input field allows the user to enter the
unauthenticated VLAN ID for the selected port. The valid range is 0-4093.The default