Security: 802.1X Authentication
Host and Session Authentication
325
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
17
•
Time Range
—Select to enable limiting authentication to a specific time range.
•
Time Range Name
—If
Time Range
is selected, select the time range to be used. Time
ranges are defined in the
section.
•
Maximum WBA Login Attempts
—Enter the maximum number of login attempts
allowed for web-based authentication. Select either
Infinite
for no limit or
User
Defined
to set a limit.
•
Maximum WBA Silence Period
—Enter the maximum length of the silent period for
web-based authentication allowed on the interface. Select either
Infinite
for no limit or
User Defined
to set a limit.
•
Max Hosts
—Enter the maximum number of authorized hosts allowed on the interface.
Select either
Infinite
for no limit or
User Defined
to set a limit.
NOTE
Set this value to 1 to simulate single-host mode for web-based authentication in
multi-sessions mode.
•
Quiet Period
—Enter the length of the quiet period.
•
Resending EAP
—Enter the number of seconds that the device waits for a response to
an Extensible Authentication Protocol (EAP) request/identity frame from the supplicant
(client) before resending the request.
•
Max
EAP Requests
—Enter the maximum number of EAP requests that can be sent. If
a response is not received after the defined period (supplicant timeout), the
authentication process is restarted.
•
Supplicant Timeout
—Enter the number of seconds that lapses before EAP requests are
resent to the supplicant.
•
Server Timeout
—Enter the number of seconds that lapses before the device resends a
request to the authentication server.
STEP 4
Click
Apply
. The port settings are written to the Running Configuration file.
Host and Session Authentication
The Host and Session Authentication page enables defining the mode in which 802.1X
operates on the port and the action to perform if a violation has been detected.
for an explanation of these modes.
