ZyXEL Communications OLT2406, User Manual

Page: 166 / 766

Chapter 19 Port Authentication
OLT2406 User’s Guide
166
19.2.2 Guest VLAN
When 802.1x port authentication is enabled on the OLT and its ports, clients that do not have the correct
credentials are blocked from using the port(s). You can configure your OLT to have one VLAN that acts
as a guest VLAN. If you enable the guest VLAN (
102 in the example) on a port ( 2 in the example), the
user ( A in the example) that is not IEEE 802.1x capable or fails to enter the correct username and
password can still access the port, but traffic from the user is forwarded to the guest VLAN. That is,
unauthenticated users can have access to limited network resources in the same guest VLAN, such as
the Internet. The rights granted to the Guest VLAN depends on how the network administrator
configures switches or routers with the guest network feature.
Figure 106 Guest VLAN Example
Max-Req Specify the number of times the OLT tries to authenticate client(s) before sending
unresponsive ports to the Guest VLAN.
This is set to 2 by default. That is, the OLT attempts to authenticate a client twice. If the client
does not respond to the first authentication request, the OLT tries again. If the client still does
not respond to the second request, the OLT sends the client to the Guest VLAN. The client
needs to send a new request to be authenticated by the OLT again.
Reauth Specify if a subscriber has to periodically re-enter his or her username and password to stay
connected to the port.
Reauth-period Specify the length of time required to pass before a client has to re-enter his or her username
and password to stay connected to the port.
Quiet-period Specify the number of seconds the port remains in the HELD state and rejects further
authentication requests from the connected client after a failed authentication exchange.
Tx-period Specify the number of seconds the OLT waits for client’s response before re-sending an
identity request to the client.
Supp-Timeout Specify the number of seconds the OLT waits for client’s response to a challenge request
before sending another request.
Apply Click Apply to save your changes to the OLT’s run-time memory. The OLT loses these changes
if it is turned off or loses power, so use the Save link on the top navigation panel to save your
changes to the non-volatile memory when you are done configuring.
Cancel Click Cancel to begin configuring this screen afresh.
Table 53 Advanced Application > Port Authentication > 802.1x (continued)
LABEL DESCRIPTION