PureStream PureLink VIP-NET-M28A Media Hub, User Manual

Page: 144 / 196

VIP-NET-M28A Network Switch - USER MANUAL
VERSION 1.0
The advantage of MAC-based authentication over 802.1X is that several clients can be connected to the
same port (e.g. through a 3rd party switch or a hub) and still require individual authentication, and that the
clients do npt need special supplicant software to authenticate. The disadvantage is that MAC addresses
can be spoofed by malicious users, equipment whose MAC address is a valid RADIUS user can be used
by anyone, and only the MD5-Challenge method is supported.
802.1X and MAC-Based authentication configurations consist of two sections: system- and port-wide.
Configuration
Label Description
Mode
Indicates if 802.1X and MAC-based authentication is globally
enabled or disabled on the switch. If globally disabled, all ports
are allowed to forward frames.
Reauthentication
Enabled
If checked, clients are reauthenticated after the interval
specified by the Reauthentication Period. Reauthentication for
802.1X-enabled ports can be used to detect if a new device is
plugged into a switch port.
For MAC-based ports, reauthentication is only useful if the
RADIUS server configuration has changed. It does not involve
communication between the switch and the client, and therefore
does not imply that a client is still present on a port (see Age
Period below).
Reauthentication Period
Determines the period, in seconds, after which a connected
client must be re-authenticated. This is only active if the
Reauthentication Enabled checkbox is checked. Valid range
of the value is 1 to 3600 seconds.
EAPOL Timeout Determines the time for retransmission of Request Identity