User's Manual

Smart Managed Pro Switches MS510TX and MS510TXPP
Manage Device Security User Manual246
• Dynamic VLAN Assignment. From the menu, select Enable to enable dynamic
VLAN assignment on the port. By default, dynamic VLAN assignment is disabled on
all ports.
This feature is also known as RADIUS Assigned VLAN Attribute (RAVA). If this
feature is enabled, RADIUS servers can assign a VLAN ID to a port based on
802.1
authentication. If a user is authenticated, the user is assigned to this VLAN.
When this feature is enabled on a port, each user is individually authenticated.
• Guest VLAN. From the menu, select Enable to enable the guest VLAN on the port.
By default, the guest VLAN is disabled on all ports. For more information about the
guest VLAN, see
Configure Global 802.1X Settings on page 243.
• Periodic Reauthentication. From the menu, select Enable to allow periodic
reauthentication of the supplicant for the port. By default, periodic reauthentication is
disabled and connected clients are not forced to reauthenticate periodically.
• Reauthentication Period. Specify the time, in seconds, after which reauthentication
of the supplicant occurs. The reauthentication period must be a value in the range of
300–4294967295 seconds. The default value is 3600 seconds.
• Quiet Period. Specify the number of seconds that the port remains in the quiet state
following a failed authentication exchange. The valid range is 30–65535, and the
default value is 60 seconds. While in the quite state, the port does not attempt to
acquire a supplicant.
• Resending EAP. Specify the EAP retransmit period for the selected port. The
transmit period is the value, in seconds, after which an EAPoL EAP Request/Identify
frame is resent to the supplicant. The valid range is 30–65535 seconds, and the
default value is 30 seconds.
• Max EAP Requests. Specify the maximum number of EAP requests for the selected
port. The value is the maximum number of times an EAPoL EAP Request/Identity
message is retransmitted before the supplicant times out. The valid range is 1–10,
and the default value is 2.
• Supplicant Timeout. Specify the supplicant time-out for the selected port. The
supplicant time-out is the value, in seconds, after which the supplicant times out. The
valid range is 1–65535 seconds, and the default is 30 seconds.
• Server Timeout. Specify the time that elapses before the switch resends a request to
the authentication server. The valid range is 1–65535 seconds, and the default is 30
seconds.
9. Click the Apply button.
Your settings are saved.