User Manual

Manage Device Security
530
M4200 and M4300 Series ProSAFE Managed Switches Web Management User Manual
7. For the selected ports, specify the following settings:
• Control Mode. Select an option for the control mode. The control mode is set only if
the link status of the port is Link Up. The options are as follows:
- Force unauthorized. The authenticator port access entity (PAE) unconditionally
sets the controlled port to unauthorized.
- Force authorized. The authenticator PAE unconditionally sets the controlled port
to authorized.
- Auto. The authenticator PAE sets the controlled port mode to reflect the outcome
of the authentication exchanges between the supplicant, authenticator, and the
authentication server.
- MAC Based. The authenticator PAE sets the controlled port mode to reflect the
outcome of the authentication exchanges between the supplicant, authenticator,
and the authentication server on a per supplicant basis.
- N/A. The control mode is not applicable.
• Use MAB to enable or disable MAC-based. The default selection is Disable. The
authenticator PAE sets the controlled port mode to reflect the outcome of the
authentication exchanges between the supplicant, authenticator, and the
authentication server on a per-supplicant basis.
• Quiet Period. This input field allows you to configure the quiet period for the selected
port. This command sets the value in seconds of the timer used by the authenticator
state machine on this port to define periods of time in which it does not attempt to
acquire a supplicant. The quiet period is the period for which the authenticator does
not attempt to acquire a supplicant after a failed authentication exchange with the
supplicant. The quiet period must be a number in the range of 0 and 65535. A quiet
period value of 0 means that the authenticator state machine never acquires a
supplicant. The default value is 60. Changing the value does not change the
configuration until you click the Apply button.
• Transmit Period. This input field allows you to configure the transmit period for the
selected port. The transmit period is the value, in seconds, of the timer used by the
authenticator state machine on the specified port to determine when to send an
EAPOL EAP request/identity frame to the supplicant. The transmit period must be a
number in the range of 1 and 65535. The default value is 30. Changing the value
does not change the configuration until the Apply button is clicked.
• GuestVLAN ID. This field allows you to configure guest VLAN ID on the interface. The
valid range is 0–4093.The default value is 0. Changing the value does not change the
configuration until the Apply button is clicked. Enter 0 to clear the guest VLAN ID on
the interface.
• Guest VLAN Period. This input field allows the user to enter the guest VLAN period
for the selected port. The guest VLAN period is the value, in seconds, of the timer for
guest VLAN authentication. The guest VLAN time-out must be a value from 1 to 300.
The default value is 90. Changing the value does not change the configuration until
the Apply button is clicked.
• Unauthenticated VLAN ID. Enter the unauthenticated VLAN ID for the selected port.
The valid range is 0–4093.The default value is 0. Changing the value does not