8 Security
45
function. In this case, this timer sets the interval to send the multicast request/identity packets.
It is in the range of 1 to 65535; the default value is 30 seconds.
Supplicant Timeout
:
Set the supplicant system timer, this timer sets the supp-timeout period
and is triggered by the switch after the switch sends a request/challenge packet to a
supplicant system. The switch sends another request/challenge packet to the supplicant
system if the switch does not receive any response from the supplicant system when this
timer times out. It is in the range of 1 to 300; the default value is 30 seconds.
Server Timeout
:
Set the radius server timer, this timer sets the server-timeout period. After
sending an authentication request packet to the radius server, a switch sends another
authentication request packet if it does not receive any response from the radius server when
this timer times out. It is in the range of 1 to 300; the default value is 30 seconds.
Max Request Count
:
Set the maximum number of times that a switch sends authentication
request packets to a user. It is in the range of 1 to 10, and the default value is 2.
Reauth Period
:
Set re-authentication interval in second. After this timer expires, the switch
indicates: 802.1x re-authentication. It is in the range of 60 to 7200; the default value is 60
seconds.
Guest VLAN
:
Can choose a guest VLAN on the switch to provide limited services to clients,
such as downloading. By default, there is none guest VLAN.
When enabling a guest VLAN on an IEEE 802.1x port, the switch assigns the client port to a
guest VLAN in case that the switch does not receive any response to its EAP request/identity
frame, or EAPOL packets are not sent by the client. The switch allows the client that is failed
in authentication to access the guest VLAN, regardless of whether EAPOL packets have
been detected. However, access to external ports out of guest VLAN still needs to be
authorized.
8.3 MAC Authentication
Note:
Enable MAC Authenticantion in
3 Advanced Configuration
before configuring .