LevelOne GEL-5261, User Manual

Page: 260 / 570

Chapter 12
| Security Measures
Network Access (MAC Address Authentication)
– 260 –
◆ When a user attempts to log into the network with a returned dynamic QoS
profile that is different from users already logged on to the same port, the user
is denied access.
◆ While a port has an assigned dynamic QoS profile, any manual QoS
configuration changes only take effect after all users have logged off the port.
Configuring
Global Settings for
Network Access
MAC address authentication is configured on a per-port basis, however there are
two configurable parameters that apply globally to all ports on the switch. Use the
Security > Network Access (Configure Global) page to configure MAC address
authentication aging and reauthentication time.
Parameters
These parameters are displayed:
◆
Aging Status – Enables aging for authenticated MAC addresses stored in the
secure MAC address table. (Default: Disabled)
This parameter applies to authenticated MAC addresses configured by the MAC
Address Authentication process described in this section, as well as to any
secure MAC addresses authenticated by 802.1X, regardless of the 802.1X
Operation Mode (Single-Host, Multi-Host, or MAC-Based authentication as
described on
page 302 ).
Authenticated MAC addresses are stored as dynamic entries in the switch’s
secure MAC address table and are removed when the aging time expires.
The maximum number of secure MAC addresses supported for the switch
system is 1024.
◆ Reauthentication Time – Sets the time period after which the switch removes
an authenticated MAC address from the secure table. When the
reauthentication time expires for a secure MAC address, it is removed from the
secure MAC address table, and the switch will only perform the authentication
process the next time it receives the MAC address packet. (Range: 120-1000000
seconds; Default: 1800 seconds)
Web Interface
To configure aging status and reauthentication time for MAC address
authentication:
1.
Click Security, Network Access.
2.
Select Configure Global from the Step list.
3.
Enable or disable aging for secure addresses, and modify the reauthentication
time as required.
4.
Click Apply.