S1700 Managed Series Ethernet Switches
Web User Manual
9 Security
Issue 05 (2012-10-25)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
126
Step 5
Click Apply button to apply all the changes made.
----End
9.2.3 Interface
When 802.1X is enabled, configure the parameters of the authentication process that runs
between the client and the switch, as well as the parameter of client identity, which looks up
on authentication server.
Click Security>802.1X>Interface Configuration, the configuration page is as follows.
Figure 9-8
Interface
Table 9-6
Parameters of Interface
Item
Description
Interface Name
Interface Number
AdmDir
There are two options: RX or TX and RX. If select RX, only control the
inbound traffic on the interface. If select TX and RX, control both of
inbound and outbound traffic on the interface.
Port Control
Authentication mode is one of the following options:
Auto: Enables 802.1X and allows the interface in unauthorized status,
and only allows sending EAPOL frame and receiving the corresponding
response frame. When the link status of the interface is changed from
Disable to Enable, or when receives EAPOL-start frame, authentication
process starts, then the switch requires the identity of the authentication
client, and relays the authentication information between client and
authentication server.
Force-Authorized: Indicates the interface is always in authorized status.
Permit user to access network source without authorization.
Force-Unauthorized: Indicates the interface is always in unauthorized
status, no response to the user authentication request and the user is not
permitted to access the network source.
Tx Period
The period during an authentication session that the switch waits before
re-transmit an EAP packet (Range: 1 - 120; Default: 30 seconds)
Quiet Period
Period that the failed authentication between switch and client, and then
begin to authenticate. (Range: 10-3600; Default: 60 seconds)
