ZyXEL Communications GS2210-24, Руководство пользователя

Страница: 160 / 444

Chapter 18 Port Authentication
GS2210 Series User’s Guide
160
The follow ing t able descr ibes t he labels in t his scr een.
18.3.1 Guest VLAN
When 802.1x port aut hent icat ion is enabled on t he Sw it ch and it s por t s, client s t hat do not have t he
cor r ect cr edent ials ar e blocked fr om using t he por t ( s) . You can configur e your Swit ch t o have one
VLAN t hat act s as a guest VLAN. I f you enable t he guest VLAN ( 1 0 2 in t he exam ple) on a por t ( 2 in
t he exam ple) , t he user ( A in t he exam ple) t hat is not I EEE 802.1x capable or fails t o ent er t he
cor r ect user nam e and passw or d can st ill access t he por t , but t raffic fr om t he user is for war ded t o
t he guest VLAN. That is, unaut hent icat ed user s can have access t o lim it ed net w or k r esour ces in t he
sam e guest VLAN, such as t he I nt er net . The r ight s grant ed t o t he Guest VLAN depends on how t he
net w or k adm inist rat or configur es sw it ches or r out er s w it h t he guest net w or k feat ur e.
Table 64 Advanced Applicat ion > Port Aut hent icat ion > 802.1x
LABEL DESCRIPTION
Act ive Select t his check box t o per m it 802.1x aut hent icat ion on t he Sw it ch.
Note: You must first enable 802.1x authentication on the Switch before configuring it on each
port.
Port This field displays t he por t num ber.
* Set t ings in t his r ow apply t o all por t s.
Use t his r ow only if you want t o m ake som e set t ings t he sam e for all por t s. Use t his r ow
fir st t o set t he com m on set t ings and t hen m ake adj ust m ent s on a por t - by- por t basis.
Note: Changes in this row are copied to all the ports as soon as you make them.
Act ive Select t his t o per m it 802.1x aut hent icat ion on t his por t . You m ust fir st allow 802.1x
aut hent icat ion on t he Sw it ch befor e configur ing it on each por t .
Max- Req Specify t he num ber of t im es t he Sw it ch t r ies t o aut hent icat e client ( s) befor e sending
unr esponsive por t s t o t he Guest VLAN.
This is set t o 2 by default . That is, t he Sw it ch at t em pt s t o aut hent icat e a client t w ice. I f t he
client does not r espond t o t he fir st aut hent icat ion r equest , t he Sw it ch t ries again. I f t he
client st ill does not r espond t o t he second r equest , t he Sw it ch sends t he client t o t he Guest
VLAN. The client needs t o send a new r equest t o be aut hent icat ed by t he Sw it ch again.
Reaut h Specify if a subscr iber has t o per iodically r e- ent er his or her user nam e and passw or d t o
st ay connect ed t o t he por t .
Reaut h- per iod
secs Specify t he lengt h of t im e r equir ed t o pass befor e a client has t o r e- ent er his or her
usernam e and passw or d t o st ay connect ed t o t he por t .
Quiet - per iod
secs Specify t he num ber of seconds t he por t r em ains in t he HELD st at e and rej ect s fur t her
aut hent icat ion r equest s fr om t he connect ed client aft er a failed aut hent icat ion exchange.
Tx- per iod secs Specify t he num ber of seconds t he Sw it ch wait s for client ’s r esponse befor e r e- sending an
ident it y r equest t o t he client .
Supp-Tim eout
secs Specify t he num ber of seconds t he Sw it ch w ait s for client ’s r esponse t o a challenge
r equest before sending anot her r equest .
Apply Click Apply t o save your changes t o t he Sw it ch’s run- t im e m em ory. The Sw it ch loses t hese
changes if it is t ur ned off or loses pow er, so use t he Sa ve link on t he t op navigat ion panel
t o save your changes t o t he non- volat ile m em ory w hen you ar e done configuring.
Cancel Click Ca n ce l t o begin configur ing t his scr een afr esh.