ZyXEL Communications OLT2406, User Manual

Page: 496 / 766

Chapter 69 Port Authentication
OLT2406 User’s Guide
496
Guest-vlan : A guest VLAN is a pre-configured VLAN on the OLT that allows non-authenticated users to
access limited network resources through the OLT. You must also enable IEEE 802.1x authentication on
the OLT and the associated ports. Enter the number that identifies the guest VLAN.
Host-mode : Specify how the OLT authenticates users when more than one user connect to the port
(Using a hub).
Multi-secure number : If you set Host-mode to Multi-Secure , specify the maximum number of users
(Between 1 and 24) that the OLT will authenticate on this port.
The following table lists the IEEE 802.1X port authentication commands.
Table 252 Port Authentication Commands
COMMAND DESCRIPTION M P
port-access-authenticator
Enables 802.1x authentication on the OLT. C 13
port-access-authenticator < aid >
Enables 802.1x authentication on the specified
port(s).
aid
:
slot-< geslot > | <ge|pon>-< slot >-
< port >
A “geslot” is a chassis slot with a GPON or GE line
card installed.
C 13
port-access-authenticator < aid >
max-req <1-10>
Sets the number of times the OLT tries to
authenticate client(s) before sending
unresponsive ports to the guest VLAN. C 13
port-access-authenticator < aid >
quiet-period <0-65535>
Sets the number of seconds the port(s) remains
in the HELD state and rejects further
authentication requests from the client after a
failed authentication exchange. C 13
port-access-authenticator < aid >
reauth-period <1-65535>
Specifies how often (in seconds) a client has to
re-enter the username and password to stay
connected to the specified port(s). C 13
port-access-authenticator < aid >
reauthenticate
Sets a subscriber to periodically re-enter his or
her username and password to stay connected
to a specified port. C 13
port-access-authenticator < aid >
supp-timeout <30-65535>
Sets the number of seconds the OLT waits for
client's response to the challenge request
before sending a request again. C 13
port-access-authenticator < aid >
tx-period <1-65535>
Sets the number of seconds the OLT waits before
re-sending an identity request to clients on the
listed ports. C 13
port-access-authenticator < aid >
guest-vlan
Enables the guest VLAN feature on the listed
ports. C 13
config
port-access-authenticator < aid >
guest-vlan < vlan-id >
Sets the guest VLAN ID number on the listed
ports. C 13
port-access-authenticator < aid >
guest-vlan Host-mode Multi-host
Sets the OLT to authenticate only the first client
that connects to the listed ports.
If the first user enters the correct credential, any
other users are allowed to access the port
without authentication. Otherwise, they are all
put in the guest VLAN. Once the first user who
did authentication logs out or disconnects from
the port, rest of the users are blocked until a user
does the authentication process again.
C 13