2 port authentication settings – ZyXEL Communications GS-2724 User Manual

Page 279

Advertising
background image

Chapter 40 Configuration Mode Commands

GS-2724 User’s Guide

279

See

Section 40.9.2 on page 279

for an example.

40.9.2 Port Authentication Settings

Use the

port-access-authenticator

command to configure port security on the Switch.

Syntax:

port-access-authenticator
port-access-authenticator <port-list>
port-access-authenticator <port-list> reauthenticate
port-access-authenticator <port-list> reauth-period <reauth-period>

where

An example is shown next.

• Specify RADIUS server 1 with IP address 10.10.10.1, port 1890 and the string

secretKey as the password. See

Section 40.9.1 on page 278

for more information on

RADIUS server commands.

radius-server timeout <1-
1000>

=

Specifies the timeout period (in seconds) the Switch
will wait for a response from a RADIUS server. If 2
RADIUS servers are configured, this is the total time
the Switch will wait for a response from either server.

mode <priority|round-robin>

=

Specifies the way the Switch will process requests
from the clients to the RADIUS server. (Only
applicable with multiple RADIUS servers
configured.)

priority

- When a client sends an authentication

request through the Switch to the RADIUS server.
The Switch will forward the request to the RADIUS
server. If no response within half the timeout period,
it will forward the request to the second RADIUS
server.

round-robin

- When a client sends an

authentication request through the Switch to the
RADIUS server. The Switch will forward the request
to the first RADIUS server. If there is no response
within the timeout period, the request times out. The
client sends an authentication request again and the
Switch forwards the request to the second RADIUS
server.

port-access-authenticator

=

Enables port authentication on the Switch.

port-access-authenticator
<port-list>

=

Specifies which ports require authentication.

reauthenticate

=

Enables reauthentication on the port.

reauth-period <reauth-
period>

=

Specifies how often a client has to re-enter his or her
username and password to stay connected to the port.

Advertising