Aruba Networks AirOS v2.3, Руководство пользователя

Страница: 123 / 254

Configuring 802.1x Security 113
Chapter 8
The machine credentials can be cached and reused between re-auths so the Switch does not
have to authenticate every time it reloads. The variable that controls this is the Machine
Authentication Cache Timeout.
To set the value of the Machine Authentication Cache Timeout :
1 Click
Show
on the right of the
Advanced Configuration
section.
2 Set the value of the Machine Authentication Cache Timeout to the desired value.
The default value is 24 hours.
N
OTE
—
The Advanced Configuration settings should not be modified unless there
is a need to customize at a more detailed level.
The Authentication server to which the switch will send authentication requests needs to
be configured in addition to the 802.1x settings. To configure the authentication servers:
Machine
Authentication
Default Role The role and policies that will
be applied if the machine
authentication goes through
but the user authentication has
not yet been initiated.
Default:
guest
Pull down
menu of pre-
configured
roles Select the role that
needs to be applied if
only machine
authentication is
complete.
Good policy is to have
different access rights
for this role from the
other two roles.
User
Authentication
Default Role The role and policies that will
be applied if the machine
authentication did not go
through but the user
authentication succeeded.
Default: guest
Pull down
menu of pre-
configured
roles Select the role that
needs to be applied if
only machine
authentication is
complete.
Good policy is to have
different access rights
for this role from the
other two roles.
Authentication
Failure Threshold
for Station
Blacklisting This is a security feature. This
specifies the number of times
a user can try to login with
wrong credentials after which
the user will be blacklisted as
a security threat.
Default: 3
Integer Set value to 0 to disable
blacklisting.
Set to a non zero integer
value to blacklist after
the specified number of
failures.