NPort Networks N1-9802W, Руководство пользователя

Страница: 83 / 296

83
Hold Time
RADIUS-Assigned
QoS Enable
client, so this will not detect whether the
client is still attached or not, and the only
way to free any resources is to age the
entry.
This setting applies to the following modes,
i.e. modes using the Port Security
functionality to secure MAC addresses:
1) Single 802.1X
2) Multi 802.1X
3) MAC-Based Auth.
If a client is denied access- either because
the RADIUS server denies the client
access or because the RADIUS server
request times out(according to the timeout
speficied on the
“Configuration

Security

AAA
” page)- the
client is put on hold in the Unauthorized
state. The hold timer doesn
’t count during
an on-going authentication.
In MAC-based Auth. Mode, the switch will
ignore new frames coming from the client
during the hold time.
The Hold Time can be set to a number
between 10 and 1000000 seconds
RADIUS-assigned QoS provides a means
to centrally control the traffic class to which
traffic coming from a successfully
authenticated supplicant is assigned on the
switch. The RADIUS server must be
configured to transmit special RADIUS
attributes to take adventage of this feature.
The
“RADIUS-Assigned QoS Enabled”
checkbox provides a qucik way to globally
enabled/disabled RADIUS-server assigned
QoS class functionality. When checked,
the individual ports
’ ditto setting determine
whether RADIUS-assigned QoS is enabled