Configuring Device Security
Defining 802.1X
Cisco Small Business SFE/SGE Managed Switches Administration Guide
80
4
Interface Status field. In addition, the Limited Dynamic Lock mode is selected.
The possible range is 1-128. The default is 1.
•
Action on Violation — Indicates the action to be applied to packets arriving on a
locked port. The possible field values are:
-
Discard
— Discards packets from any unlearned source. This is the
default value.
-
Forward
— Forwards packets from an unknown source without learning
the MAC address.
-
Shutdown
— Discards packets from any unlearned source and shuts
down the port. The port remains shut down until reactivated, or until the
device is reset.
•
Enable Trap — Enables traps when a packet is received on a locked port. The
possible field values are:
-
Checked
— Enables traps.
-
Unchecked
— Disables traps.
•
Trap Frequency — Displays the amount of time (in seconds) between traps.
The default value is 10 seconds.
STEP 3
Modify the relevant fields.
STEP 4
Click Apply. Port security is modified, and the device is updated.
Defining 802.1X
802.1x Port Base Network Access Control allows access to a switch port by
authenticated and authorized device(s) attached to the port, and prevents access
to the port in cases the authentication and authorization fail. Port Authentication
includes:
•
Authenticators
— A port that enforces authentication of the remote device
(supplicants) before permitting port access.
•
Supplicants
— A remote device attaching to a port seeking port access.
