Aruba Networks AirOS v2.3, User Manual

Page: 113 / 254

Configuring 802.1x Security 103
Chapter 8
Configuring the Authentication Servers
The Authentication server to which the switch will send authentication requests needs to
be configured in addition to the 802.1x settings.
1 Click
Add
under the
Authentication Server
to add a radius server to the 801.x setting.
Enable
Authentication To select 802.1x as an
authentication method this field
need to be checked.
Default:
Unchecked
Checkbox Select this box
Enable Re-
authentication When set this will force
the client to do a 802.1x
re-authentication after the
expiry of the default timer
for re-authentication. The
default value of the timer
is 24 hours. If the user
fails to re-authenticate
will valid credentials, the
state of the user is cleared.
If derivation rules are
used to classify dot1x
users then the Re-
authentication timer per
role will over-ride this
setting.
Default: Unchecked
Checkbox Select this box only if
re-authentication needs
to be enabled. The re-
authentication timer
can also be modified if
required as explained
in
Advanced
Configuration options
of 802.1x.
Authentication
Failure Threshold
for Station
Blacklisting This is a security feature. This
specifies the number of times a
user can try to login with wrong
credentials after which the user
will be blacklisted as a security
threat.
Default: 3
Integer Set value to 0 to disable
blacklisting.
Set to a non zero
integer value to
blacklist after the
specified number of
failures.