Download User Manual

Security: 802.1X Authentication
802.1X Configuration Through the GUI
•
23
-
Reject—If the RADIUS server authorized the supplicant, but did not provide a supplicant VLAN,
the supplicant is rejected.
-
Static—If the RADIUS server authorized the supplicant, but did not provide a supplicant VLAN,
the supplicant is accepted.
Guest VLAN—Select to indicate that the usage of a previously-defined guest VLAN is enabled for the
device. The options are:
-
Selected—Enables using a guest VLAN for unauthorized ports. If a guest VLAN is enabled, the
unauthorized port automatically joins the VLAN selected in the Guest VLAN ID field in the 802.1X
Port Authentication page.
After an authentication failure, and if guest VLAN is activated globally on a given port, the guest
VLAN is automatically assigned to the unauthorized ports as an Untagged VLAN.
-
Cleared—Disables guest VLAN on the port.
•
Open Access—Select to successfully authenticate the port even though authentication fails. See
Open Access.
•
802.1X Based Authentication—802.1X authentication is the only authentication method performed on
the port.
•
MAC Based Authentication—Port is authenticated based on the supplicant MAC address. Only 8
MAC-based authentications can be used on the port.
NOTE For MAC authentication to succeed, the RADIUS server supplicant username and password
must be the supplicant MAC address. The MAC address must be in lower case letters and entered
without the . or - separators; for example: 0020aa00bbcc.
•
Web Based Authentication—This is only available in Layer 2 switch mode or on SG500XG and
SG500X. Select to enable web-based authentication on the switch.
•
Periodic Reauthentication—Select to enable port re-authentication attempts after the specified
Reauthentication Period.
•
Reauthentication Period—Enter the number of seconds after which the selected port is
reauthenticated.
•
Reauthenticate Now—Select to enable immediate port re-authentication.
•
Authenticator State—Displays the defined port authorization state. The options are:
-
Initialize—In process of coming up.
-
Force-Authorized—Controlled port state is set to Force-Authorized (forward traffic).
-
Force-Unauthorized—Controlled port state is set to Force-Unauthorized (discard traffic).
Cisco Small Business 500 Series Stackable Managed Switch Administration Guide
442