Ruijie RG-S2900G-E Series, Configuration Manual

Page: 544 / 943

Configuration Guide 802.1x Configuration
The gust vlan function disables as the multiple MAB authentication enables. The ports will exit the guest vlan
if they are already in there.
Multiple MAB authentication does not support IP authorization or Gigabyte System Network (GSN) address
binding. That is, the functions of IP authorization and GSN address binding do not take effect on multiple
MAB authentication users.
Configuring the Silence Period for Unauthorized Multiple MAB Users
After the multiple MAB authentication is enabled, to prevent unauthorized users under the interface from attaching the
device, it is necessary to prohibit them from frequent authentication to reduce pressure on the server. Globally configure
the silence period for multiple MAB users. The default value is 30 seconds. In other words, a MAC address needs to wait
for 30 seconds to re-initiate the authentication after the authentication using the learned MAC address fails. The silence
period can be configured according to environmental requirements. 0 indicates that a user can re-authenticate
immediately after the authentication fails.
Use the following commands to configure the silence period for unauthorized multiple MAB users.
Command Function
Ruijie# configure terminal Enters global configuration mode.
Ruijie(config)# dot1x multi-mab quiet-period value Configures the silence period for unauthorized multiple
MAB users.
Ruijie(config)# show running - config Shows all configurations.
This example shows how to configure the silence period for unauthorized multiple MAB users.
Ruijie# configure terminal
Ruijie(config)# dot1x multi-mab quiet-period 100
Ruijie(config)# interface fa 0/1
Ruijie(config-if)# dot1x port-control auto
Ruijie(config-if)# dot1x mac-auth-bypass multi-user
Viewing the Configuration and Current Statistics of the 802.1x
Our 802.1X provides a full range of state machine information, which is very useful for network management and can be
used by the administrator to monitor user status in real time and make easy troubleshooting.

Viewing the Radius Authentication and Accounting Configuration

Viewing the Number of Current Users

Viewing the List of the Addresses Authenticable

Viewing the User Authentication Status Information

Showing the 1x Client Probe Time Configuration

Example of Configuring 802.1X Port-Based Dynamic VLAN Skip