Allied Telesis AT-S63 - Manual (Page 741)

AT-S63 Management Software Menus Interface User’s Guide
Section VII: Port Security 741
1 - Supplicant Mode
This parameter can take the following values on an authenticator port:
ˆ Single: Configures the authenticator port to accept only one
authentication. This supplicant mode should be used together with
the piggy-back mode. When an authenticator port is set to the
Single mode and the piggy-back mode is disabled, only the one
client who is authenticated can use the port. Packets from or to
other clients on the port are discarded. If piggy-back mode is
enabled, other clients can piggy-back onto another client’s
authentication and so be able to use the port.
ˆ Multiple: Configures the authenticator port to accept up to 20
authentications. Every client using an authenticator port in this
mode must have a username and password combination.
For addition information, refer to “Authenticator Ports with Single and
Multiple Supplicants” on page 723.
2 - Port Control
The possible settings for this parameter are:
Auto - Enables 802.1x port-based authentication and causes the port
to begin in the unauthorized state, allowing only EAPOL frames to be
sent and received through the port. The authentication process begins
when the link state of the port changes or the port receives an EAPOL-
Start packet from a supplicant. The switch requests the identity of the
client and begins relaying authentication messages between the client
and the authentication server. Each client that attempts to access the
network is uniquely identified by the switch using the client's MAC
address. This is the default setting.
Force-authorized - Disables IEEE 802.1X port-based authentication
and causes the port to transition to the authorized state without any
authentication exchange required. The port transmits and receives
normal traffic without 802.1x-based authentication of the client.
Force-unauthorized - Causes the port to remain in the unauthorized
state, ignoring all attempts by the client to authenticate. The switch
cannot provide authentication services to the client through the
interface
3 - Quiet Period
The quiet period is the number of seconds that the port remains in the
quiet state following a failed authentication exchange with the client.
The default value is 60 seconds. The range is 0 to 65,535 seconds.
4 - TX Period
This parameter sets the number of seconds that the switch waits for a
response to an EAP-request/identity frame from the client before
retransmitting the request. The default value is 30 seconds. The range
is 1 to 65,535 seconds.