180
When the client provides the login credentials, the Switch sends an authentication request to a
RADIUS server. The RADIUS server validates whether this client is allowed access to the port.
Local User Accounts
By storing user profiles locally on the Switch, your Switch is able to authenticate users without
interacting with a network authentication server. However, there is a limit on the number of users
you may authenticate in this way.
Guest VLAN:
The Guest VLAN in IEEE 802.1x port authentication on the switch to provide limited services
to clients, such as downloading the IEEE 802.1x client. These clients might be upgrading their
system for IEEE 802.1x authentication.
When you enable a guest VLAN on an IEEE 802.1x port, the switch assigns clients to a guest
VLAN when the switch does not receive a response to its EAP request/identity frame or when
EAPOL packets are not sent by the client.
Port Parameters:
Admin Control Direction:
both
- drop incoming and outgoing packets on the port when a user has not passed
802.1x port authentication.
in
- drop only incoming packets on the port when a user has not passed 802.1x port
authentication.
Re-authentication:
Specify if a subscriber has to periodically re-enter his or her username and password to stay
connected to the port.
Reauth-period:
Specify how often a client has to re-enter his or her username and password to stay
connected to the port. The acceptable range for this field is 0 to 65535 seconds.
Port Control Mode:
auto
: Users can access network after authenticating.
force-authorized : Users can access network without authentication.
force-unauthorized : Users cannot access network.
Quiet Period:
