beautypg.com

Allied Telesis AT-FS970M Series User Manual

Page 211

background image

AT-FS970M Series Version 2.3.1.0 Web Interface User’s Guide

211

times the switch retransmits EAP Request packets to a supplicant
before it times out an authentication session. The range is 1 to 10
retransmissions. The default value is 2.

Port Control Direction— Select whether the authenticator port
that is in the unauthorized state should forward egress broadcast
and multicast traffic. Choose from the following:

In: Specifies that the authenticator port in the unauthorized
state should forward egress broadcast and multicast traffic, and
discard the ingress broadcast and multicast traffic. This is the
default setting.

Both: Specifies that the authenticator port in the unauthorized
state should discard both ingress and egress broadcast and
multicast traffic.

Dynamic VLAN Creation— Check the checkbox to activate
dynamic VLAN assignments of the authenticator port.

Type— Select the type of dynamic VLAN assignments. Choose
from the following:

Single: Specifies that an authenticator port forwards packets of
only those supplicants that have the same VID as the
supplicant who initially logged on.

Multi: Specifies that an authenticator port forwards packets of
all supplicants, regardless of the VIDs in their supplicant
accounts on the RADIUS server.

Guest VLAN— Select the ID number of a VLAN that is the guest
VLAN of an authenticator port. You can select only one VID.

Host Mode— Select the operating mode on an authenticator port.
Choose from the following:

Single-host: Specifies the single host operating mode. An
authenticator port set to this mode forwards only those packets
from the one supplicant who initially logs on. This is the default
setting.

Multi-host: Specifies the multiple host operating mode. An
authenticator port set to this mode forwards all packets after
one supplicant logs on. This is referred to as piggy-backing.

Multi-supplicant: Specifies the multiple supplicant operating
mode. An authenticator port set to this mode requires that all
supplicants log on.

Mac Authentication— Check the checkbox to activate MAC
address-based authentication on the authenticator port. An
authenticator port that uses this type of authentication extracts the
source MAC address from the initial frame from a supplicant and