Digisol DG-FS4528P, Management Manual

Page: 204 / 973

C
HAPTER
7 | Security Measures
Network Access (MAC Address Authentication)
– 204 –
C
ONFIGURING
G
LOBAL
S
ETTINGS FOR
N
ETWORK
A
CCESS
MAC address authentication is configured on a per-port basis, however
there are two configurable parameters that apply globally to all ports on
the switch. Use the Security > Network Access (Configure Global) page to
configure MAC address authentication aging and reauthentication time.
CLI R
EFERENCES
"Network Access (MAC Address Authentication)" on page 605
P
ARAMETERS
These parameters are displayed:
MAC Address Reauthentication Time – Sets the time period after
which a connected host must be reauthenticated. When the
reauthentication time expires for a secure MAC address, it is
reauthenticated with the RADIUS server. During the reauthentication
process traffic through the port remains unaffected.
(Range: 120-1000000 seconds; Default: 1800 seconds)
MAC Address Aging – Enables aging for authenticated MAC addresses
stored in the secure MAC address table. (Default: Disabled)
This parameter applies to authenticated MAC addresses configured by
the MAC Address Authentication process described in this section, as
well as to any secure MAC addresses authenticated by 802.1X,
regardless of the 802.1X Operation Mode (Single-Host, Multi-Host, or
MAC-Based authentication as described on page 190 ).
Authenticated MAC addresses are stored as dynamic entries in the
switch’s secure MAC address table and are removed when the aging
time expires.
The maximum number of secure MAC addresses supported for the
switch system is 1024.
W
EB
I
NTERFACE
To configure aging status and reauthentication time for MAC address
authentication:
1. Click Security, Network Access, Configuration.
2. Enable or disable aging for secure addresses, and modify the
reauthentication time as required.
3. Click Apply.
Figure 81: Configuring Global Settings for Network Access