beautypg.com

3 mac authentication – Signamax Managed Hardened PoE Industrial DIN-rail Mount Switch User Manual

Page 45

background image

8 Security

40

function. In this case, this timer sets the interval to send the multicast request/identity packets.

It is in the range of 1 to 65535; the default value is 30 seconds.

Supplicant Timeout:Set the supplicant system timer, this timer sets the supp-timeout period

and is triggered by the switch after the switch sends a request/challenge packet to a

supplicant system. The switch sends another request/challenge packet to the supplicant

system if the switch does not receive any response from the supplicant system when this

timer times out. It is in the range of 1 to 300; the default value is 30 seconds.

Server Timeout:Set the radius server timer, this timer sets the server-timeout period. After

sending an authentication request packet to the radius server, a switch sends another

authentication request packet if it does not receive any response from the radius server when

this timer times out. It is in the range of 1 to 300; the default value is 30 seconds.

Max Request Count:Set the maximum number of times that a switch sends authentication

request packets to a user. It is in the range of 1 to 10, and the default value is 2.

Reauth Period:Set re-authentication interval in second. After this timer expires, the switch

indicates: 802.1x re-authentication. It is in the range of 60 to 7200; the default value is 60

seconds.

Guest VLAN:Can choose a guest VLAN on the switch to provide limited services to clients,

such as downloading. By default, there is none guest VLAN.

When enabling a guest VLAN on an IEEE 802.1x port, the switch assigns the client port to a

guest VLAN in case that the switch does not receive any response to its EAP request/identity

frame, or EAPOL packets are not sent by the client. The switch allows the client that is failed

in authentication to access the guest VLAN, regardless of whether EAPOL packets have

been detected. However, access to external ports out of guest VLAN still needs to be

authorized.

8.3 MAC Authentication

Note:Enable MAC Authenticantion in

3 Advanced Configuration

before configuring .