Digisol DG-FS4528P, Management Manual

Page: 190 / 973

C
HAPTER
7 | Security Measures
Configuring 802.1X Port Authentication
– 190 –
Figure 72: Configuring Global Settings for 802.1X Port Authentication
C
ONFIGURING
A
UTHENTICATOR
P
ORT
S
ETTINGS FOR
802.1X
Use the Security > 802.1X > Authenticator Port Configuration page to
configure 802.1X port settings for the switch as the local authenticator.
When 802.1X is enabled, you need to configure the parameters for the
authentication process that runs between the client and the switch (i.e.,
authenticator), as well as the client identity lookup process that runs
between the switch and authentication server.
CLI R
EFERENCES
"802.1X Port Authentication" on page 579
P
ARAMETERS
These parameters are displayed:
Port – Port number.
Status – Indicates if authentication is enabled or disabled on the port.
The status is disabled if the control mode is set to Force-Authorized.
Operation Mode – Allows single or multiple hosts (clients) to connect
to an 802.1X-authorized port. (Default: Single-Host)
Single-Host – Allows only a single host to connect to this port.
Multi-Host – Allows multiple host to connect to this port.
In this mode, only one host connected to a port needs to pass
authentication for all other hosts to be granted network access.
Similarly, a port can become unauthorized for all hosts if one
attached host fails re-authentication or sends an EAPOL logoff
message.
MAC-Based – Allows multiple hosts to connect to this port, with
each host needing to be authenticated.
In this mode, each host connected to a port needs to pass
authentication. The number of hosts allowed access to a port
operating in this mode is limited only by the available space in the
secure address table (i.e., up to 1024 addresses).
Max MAC Count – The maximum number of hosts that can connect to
a port when the Multi-Host operation mode is selected.
(Range: 1-1024; Default: 5)