xStack
®
DGS-3400 Series Layer 2 Gigabit Ethernet Managed Switch
238
Figure 6 - 21 802.1X Authenticator Settings window of Unit 1 – Modify
This screen allows setting of the following features:
Parameter Description
Unit
Choose the Switch ID number of the Switch in the switch stack to be modified.
From/To
Enter the port or ports to be set.
AdmDir
Sets the administrative-controlled direction to either
in
or
both
.
If
in
is selected, control is only exerted over incoming traffic through the port selected in the first
field.
If
both
is selected, control is exerted over both incoming and outgoing traffic through the
controlled port selected in the first field.
PortControl
This allows the user to control the port authorization state.
Select
forceAuthorized
to disable 802.1X and cause the port to transition to the authorized
state without any authentication exchange required. This means the port transmits and
receives normal traffic without 802.1X-based authentication of the client.
If
forceUnauthorized
is selected, the port will remain in the unauthorized state, ignoring all
attempts by the client to authenticate. The Switch cannot provide authentication services to the
client through the interface.
If
Auto
is selected, it will enable 802.1X and cause the port to begin in the unauthorized state,
allowing only EAPOL frames to be sent and received through the port. The authentication
process begins when the link state of the port transitions from down to up, or when an EAPOL-
start frame is received. The Switch then requests the identity of the client and begins relaying
authentication messages between the client and the authentication server.