inS_cngE24mS_rEv–
02/18/13 PagE 78
INSTALLATION AND OPERATION MANUAL
CNGE24MS
Tech SupporT: 1.888.678.9427
Port State
The current state of the port. It can undertake one of the following
values:
• Disabled: 802.1X and MAC-based authentication is globally
disabled.
• Link Down: 802.1X or MAC-based authentication is enabled, but
there is no link on the port.
• Authorized: The port is authorized. This is the case when 802.1X
authentication is enabled, the port has link, and the Admin State
is “Auto” and the supplicant is authenticated or the Admin State is
“Authorized”.
• Unauthorized: The port is unauthorized. This is the case when
802.1X authentication is enabled, the port has link, and the Admin
State is “Auto”, but the supplicant is not (yet) authenticated or the
Admin State is “Unauthorized”.
• X Auth/Y Unauth: X clients are currently authorized and Y are
unauthorized. This state is shown when 802.1X and MAC-based
authentication is globally enabled and the Admin State is set to
“MAC-Based”.
Max Clients
This setting applies to ports running MAC-based authentication, only.
The maximum number of clients allowed on a given port can be
configured through the list-box and edit-control for this setting.
Choosing the value “All” from the list-box allows the port to consume
up to 48 client state-machines. Choosing the value “Specific” from the
list-box opens up for entering a specific number of maximum clients
on the port (1 to 48).
The switch is “born” with a pool of state-machines, from which all
ports draw whenever a new client is seen on the port. When a given
port’s maximum is reached (both authorized and unauthorized clients
count), further new clients are disallowed access. Since all ports
draw from the same pool, it may happen that a configured maximum
cannot be granted, if the remaining ports have already used all
available state-machines.
Restart
Two buttons are available for each row. The buttons are only enabled
when authentication is globally enabled and the port’s Admin State is
“Auto” or “MAC-Based”. Clicking these buttons will not cause settings
changed on the page to take effect.
• Reauthenticate: Schedules a reauthentication to whenever the
quiet-period of the port runs out (port-based authentication). For
MAC-based authentication, reauthentication will be attempted
immediately.
• The button only has effect for successfully authenticated ports/clients
and will not cause the port/client to get temporarily unauthorized.
• Reinitialize: Forces a reinitialization of the port/clients and thereby
a reauthentication immediately. The port/clients will transfer to the
unauthorized state while the reauthentication is ongoing.
