Instruction Manual
47
Aging Period
This setting applies to the following modes:
1) Single 802.1X
2) Multi 802.1X
3) MAC-Based Auth.
The Port Security Module scans for activity on the
MAC addresses at regular intervals and frees up
resources if no activity is seen within a given period
of time. This parameter controls the interval at which
the ports are scanned, and can be set to a number
between 10 and 1000000 seconds.
If re-authentication is enabled and the port is in an
802.1X-based mode, the Aging Period isn’t relevant
since clients that are no longer attached to the port
will be removed upon the next re-authentication. If
re-authentication is not enabled, the only way to free
resources is by aging the entries.
Hold Time
For ports in MAC-based Auth. mode, re-
authentication doesn’t initiate direct communication
between the switch and the client. As such, re-
authentication won’t detect whether or not the client
is still attached, and the only way to free up resources
is to age the entry.
This setting applies to the following modes, when
Port Security is used to secure MAC addresses:
1) Single 802.1X
2) Multi 802.1X
3) MAC-Based Auth.
If a client is denied access or the RADIUS server
request times out (according to the timeout specified
on the Configuration > Security > AAA page), the
client is put on hold in the Unauthorized state.
The hold timer doesn’t count during an on-going
authentication.
In MAC-based Auth. Mode, the switch will ignore new
frames coming from the client during the hold time.
The Hold Time can be set to a number between 10
and 1000000 seconds
