PLANET WGSD-8020 - Manual (Page 184)

User’s Manual of WGSD-8020
184
doesn't transmit or accept EAPOL frames on the port. Flooded frames and
broadcast traffic will be transmitted on the port, whether or not clients are
authenticated on the port, whereas unicast traffic against an unsuccessfully
authenticated client will be dropped. Clients that are not (yet) successfully
authenticated will not be allowed to transmit frames of any kind.
•
Port State
The current state of the port. It can undertake one of the following values:
• 802.1X Disabled: 802.1X and MAC-based authentication is globally
disabled.
• Link Down: 802.1X or MAC-based authentication is enabled, but there is
no link on the port.
• Authorized: The port is authorized. This is the case when 802.1X
authentication is enabled, the port has link, and the Admin State is "Auto"
and the supplicant is authenticated or the Admin State is "Authorized".
• Unauthorized: The port is unauthorized. This is the case when 802.1X
authentication is enabled, the port has link, and the Admin State is "Auto",
but the supplicant is not (yet) authenticated or the Admin State is
"Unauthorized".
• X Auth/Y Unauth: X clients are currently authorized and Y are
unauthorized. This state is shown when 802.1X and MAC-based
authentication is globally enabled and the Admin State is set to
"MAC-Based".
•
Max Clients This setting applies to ports running MAC-based authentication , only .
The maximum number of clients allowed on a given port can be configured
through the list-box and edit-control for this setting. Choosing the value "All" from
the list-box allows the port to consume up to 104 client state-machines. Choosing
the value "Specific" from the list-box opens up for entering a specific number of
maximum clients on the port (1 to 104).
The stackswitch is "born" with a pool of state-machines, from which all ports draw
whenever a new client is seen on the port. When a given port's maximum is
reached (both authorized and unauthorized clients count), further new clients are
disallowed access. Since all ports draw from the same pool, it may happen that a
configured maximum cannot be granted, if the remaining ports have already used
all available state-machines.