3Com 3C16476A - Baseline Switch 2250, User Manual

Page: 55 / 79

Security 55
Setup
Use the Setup tab to configure the 802.1X
authenticaion settings. The following fields are
available:
■
System Authentication – Sets the global setting for
802.1X. (Default: Disabled)
■
Operation Mode – Allows single or multiple hosts
(clients) to connect to an 802.1X-authorized port.
(Options: Single-Host, Multi-Host; Default:
Single-Host)
■
Mode – Sets the authentication mode to one of
the following options:
■
Auto – Requires a dot1x-aware client to be
authorized by the authentication server. Clients
that are not dot1x-aware will be denied access.
■
Force-Authorized – Forces the port to grant
access to all clients, either dot1x-aware or
otherwise.
■
Force-Unauthorized – Forces the port to deny
access to all clients, either dot1x-aware or
otherwise.
■
Maximum Request – Sets the maximum number of
times the switch port will retransmit an EAP
request packet to the client before it times out the
authentication session. (Range: 1-10; Default 2)
■
Mode Reauthentication – Sets the client to be
re-authenticated after the interval specified by the
Re-authentication Period. Re-authentication can be
used to detect if a new device is plugged into a
switch port. (Default: Disabled)
■
Max Count – The maximum number of hosts that
can connect to a port when the Multi-Host
operation mode is selected. (Range: 1-1024;
Default: 5)
■
Reauthentication Period – Sets the time period
after which a connected client must be
re-authenticated. (Range: 1-65535 seconds;
Default: 3600 seconds)
■
Quiet Period – Sets the time that a switch port
waits after the Max Request Count has been
exceeded before attempting to acquire a new
client. (Range: 1-65535 seconds; Default: 60
seconds)
■
Transmit Period – Sets the time period during an
authentication session that the switch waits before
re-transmitting an EAP packet. (Range: 1-65535;
Default: 30 seconds)
After you have filled in the parameters, click Apply to
save your changes.
Figure 59 802.1X Setup Screen