Configuring the Switch
System Configuration
802.1x makes use of the physical access characteristics of IEEE802 LAN infrastructures in order to provide a means of authenticating and authorizing devices attached to a LAN port that has point-to-point connection characteristics,
and of preventing access to that port in cases in which the authentication and authorization process fails.
To enable 802.1x, you still to fill in the authentication server information :
- Radius Server IP Address: the ip address of the authentication server.
- Server Port: The UDP port number used by the authentication server to authenticate.
- Accounting Port: The UDP port number used by the authentication server to retrieve accounting information.
- Shared Key: A key shared between this switch and authentication server.
- NAS Identifier: A string used to identify this switch.
Perport Configuration
In this page, you can select the specific port and configure the authorization state.
Each port can select four kinds of authorization state :
- Fu: force the specific port to be unauthorized.
- Fa: force the specific port to be authorized.
- Au: the state of the specific port was determinied by the outcome of the authentication.
- No: the specific port didn't support 802.1x function.
Misc Configuration
In this page, you can change the default configuration for the 802.1x standard :
- Quiet Period: used to define periods of time during which it will not attempt to acquire a supplicant(Default time is 60 seconds).
- Tx Period: used to determine when an EAPOL PDU is to be transmitted(Default value is 30 seconds).
- Supplicant Timeout: used to determine timeout conditions in the exchanges between the supplicant and authentication server(Default value is 30 seconds).
- Server Timeout: used to determine timeout conditions in the exchanges between the authenticator and authentication server(Default value is 30 seconds).
- ReAuthMax: used to determine the number of reauthentication attempts that are permitted before the specific port becomes unauthorized(Default value is 2 times).
- Reauth Period: used to determine a nonzero number of seconds between periodic reauthentication of the supplications(Default value is 3600 seconds).