FibroLAN Falcon Gen-3 M-Class, User Manual

Page: 149 / 473

Falcon M-Class | User Guide
149
Hold Time This setting applies to the following modes, i.e. modes using the Port
Security functionality to secure MAC addresses:
• Single 802.1X
• Multi 802.1X
• MAC -Based Auth.
If a client is denied access - either because the RADIUS server denies
the client access or because the RADIUS server request times out
(according to the timeout specified on the
" Configuration
→
Security
→
AAA ") the client is put on hold in the
Unauthorized state. The hold timer does not count during an on-going
authentication.
In MAC-based Auth. mode, theswitch will ignore new frames coming
from the client during the hold time.
The Hold Time can be set to a number between 10 and 1000000
seconds.
RADIUS-
Assigned QoS
Enabled
RADIUS-assigned QoS provides a means to centrally control the traffic
class to which traffic coming from a successfully authenticated
supplicant is assigned on the switch. The RADIUS server must be
configured to transmit special RADIUS attributes to take advantage of
this feature (Refer to RADIUS-Assigned QoS Enabled within Port
Configuration-see below) for a detailed description).
The "RADIUS-Assigned QoS Enabled" checkbox provides a quick way to
globally enable/disable RADIUS-server assigned QoS Class functionality.
When checked, the individual ports' ditto setting determines whether
RADIUS-assigned QoS Class is enabled on that port. When unchecked,
RADIUS-server assigned QoS Class is disabled on all ports.
RADIUS-
Assigned VLAN
Enabled
RADIUS-assigned VLAN provides a means to centrally control the VLAN
on which a successfully authenticated supplicant is placed on the
switch. Incoming traffic will be classified to and switched on the
RADIUS-assigned VLAN. The RADIUS server must be configured to
transmit special RADIUS attributes to take advantage of this feature
(see RADIUS-Assigned VLAN Enabled within Port Configuration below)
for a detailed description.
The "RADIUS-Assigned VLAN Enabled" checkbox provides a quick way
to globally enable/disable RADIUS-server assigned VLAN functionality.
When checked, the individual ports' ditto setting determines whether
RADIUS-assigned VLAN is enabled on that port. When unchecked,
RADIUS-server assigned VLAN is disabled on all ports
Guest VLAN
Enabled
A Guest VLAN is a special VLAN - typically with limited network access -
on which 802.1X-unaware clients are placed after a network
administrator-defined timeout. The switch follows a set of rules for
entering and leaving the Guest VLAN as listed below.
The "Guest VLAN Enabled" checkbox provides a quick way to globally
enable/disable Guest VLAN functionality. When checked, the individual
ports' ditto setting determines whether the port can be moved into
Guest VLAN. When unchecked, the ability to move to the Guest VLAN is
disabled on all ports.
Guest VLAN ID This is the value that a port's Port VLAN ID is set to if a port is moved
into the Guest VLAN. It is only changeable if the Guest VLAN option is
globally enabled.
Valid values are in the range [1; 4095].