RGS-PR9000 Series User Manual
ORing Industrial Networking Corp
121
authentication, and that the clients do npt need special supplicant software to authenticate.
The disadvantage is that MAC addresses can be spoofed by malicious users, equipment
whose MAC address is a valid RADIUS user can be used by anyone, and only the
MD5-Challenge method is supported.
802.1X and MAC-Based authentication configurations consist of two sections: system- and
port-wide.
Label
Description
Mode
Indicates if 802.1X and MAC-based authentication is globally enabled or
disabled on the switch. If globally disabled, all ports are allowed to forward
frames.
Reauthenti
cation
Enabled
If checked, clients are reauthenticated after the interval specified by the
Reauthentication Period. Reauthentication for 802.1X-enabled ports can be
used to detect if a new device is plugged into a switch port.
For MAC-based ports, reauthentication is only useful if the RADIUS server
configuration has changed. It does not involve communication between the
switch and the client, and therefore does not imply that a client is still present
on a port (see Age Period below).
