Filter
Top Products
DES-3226 NWay Standalone Fast Ethernet Switch User’s Guide
Figure 6-45. Configure 802.1X – Authenticator Configuration screen
This screen allows you to set the following features:
• Configure Port from [ ] to [ ] – Enter the port or ports to be set.
• AdmDir:<both> – Sets the administrative-controlled direction to either in or both. If in is
selected, control is only exerted over incoming traffic through the port you selected in the first
field. If both is selected, control is exerted over both incoming and outgoing traffic through the
controlled port selected in the first field.
• PortControl:<auto> – This allows you to control the port authorization state. Select
forceAuthorized to disable 802.1X and cause the port to transition to the authorized state
without any authentication exchange required. This means the port transmits and receives
normal traffic without 802.1X-based authentication of the client. If forceUnauthorized is
selected, the port will remain in the unauthorized state, ignoring all attempts by the client to
authenticate. The switch cannot provide authentication services to the client through the
interface. The third option is auto. This enables 802.1X and causes the port to begin in the
unauthorized state, allowing only EAPOL frames to be sent and received through the port. The
authentication process begins when the link state of the port transitions from down to up, or
when an EAPOL-start frame is received. The switch then requests the identity of the client and
begins relaying authentication messages between the client and the authentication server.
• TxPeriod:[30 ] – This sets the TxPeriod of time for the authenticator PAE state machine. This
value determines the period of an EAP Request/Identity packet transmitted to the client.
• QuietPeriod:[60 ] – This allows you to set the number of seconds that the switch remains in the
quiet state following a failed authentication exchange with the client.
• SuppTimeout:[30 ] – This value determines timeout conditions in the exchanges between the
Authenticator and the client.
• ServerTimeout:[30 ] – This value determines timeout conditions in the exchanges between the
Authenticator and the authentication server.
• MaxReq:[2 ] – The maximum number of times that the switch will retransmit an EAP Request to
the client before it times out of the authentication sessions
• ReAuthPeriod:[3600 ] – A constant that defines a nonzero number of seconds between periodic
reauthentication of the client.
71