Industrial Managed
Ethernet Switch – EH9711
User Manual
Page
177
of
223
Use the port select box
to select which port to show status for. Click on
Auto-refresh box
to refresh the page
automatically. Automatic refresh occurs every 3 seconds. Click
Refresh button
to refresh the page immediately
3.5.1.3
NAS Switch
This page provides an overview of the current NAS port states. NAS is an acronym for
N
etwork
A
ccess
S
erver. The NAS is
meant to act as a gateway to guard access to a protected source. A client connects to the NAS, and the NAS connects to another
resource asking whether the client's supplied credentials are valid. Based on the answer, the NAS then allows or disallows
access to the protected resource. An example of a NAS implementation is IEEE 802.1X.
Figure 3.24 Webpage to Monitor Network Access Server Switch Status
Table 3.18 Monitoring Descriptions of Network Access Server Switch Status
State
Indicates whether the corresponding MAC address is blocked or forwarding. In the blocked state, it will
not be allowed to transmit or receive traffic.
Age/Hold
If at least one user module has decided to block this MAC address, it will stay in the blocked state until
the hold time (measured in seconds) expires. If all user modules have decided to allow this MAC address
to forward, and aging is enabled, the Port Security module will periodically check that this MAC address
still forwards traffic. If the age period (measured in seconds) expires and no frames have been seen, the
MAC address will be removed from the MAC table. Otherwise, a new age period will begin. If aging is
disabled or a user module has decided to hold the MAC address indefinitely, a dash (-) will be shown.
Label
Description
Port
The switch port number. Click to navigate to detailed NAS statistics for this port.
Admin State
The port's current administrative state. Refer to NAS Admin State for a description of possible values.
Port State
The current state of the port. Refer to NAS Port State for a description of the individual states.
Last Source
The source MAC address carried in the most recently received EAPOL frame for EAPOL-based
authentication, and the most recently received frame from a new client for MAC-based authentication.
Last ID
The user name (supplicant identity) carried in the most recently received Response Identity EAPOL
frame for EAPOL-based authentication, and the source MAC address from the most recently received
frame from a new client for MAC-based authentication.
QoS Class
QoS Class assigned to the port by the RADIUS server if enabled.
Port VLAN ID
The VLAN ID that NAS has put the port in. The field is blank, if the Port VLAN ID is not overridden
by NAS. If the VLAN ID is assigned by the RADIUS server, "(RADIUS-assigned)" is appended to the
VLAN ID. Read more about RADIUS-assigned VLANs at
Configuration->Security->Network->NAS. If the port is moved to the Guest VLAN, "(Guest)" is
appended to the VLAN ID. Read more about Guest VLANs Configuration->Security->Network-
>NAS.
