Allied Telesis AT-S63 - Manual (Page 404)

Chapter 25: 802.1x Port-based Network Access Control
404 Section VI: Port Security
Server Timeout
Sets the timer used by the switch to determine authentication server
timeout conditions. The default value for this parameter is 10 seconds.
The range is 1 to 60 seconds.
Control Direction
Specifies how the port handles ingress and egress broadcast and
multicast packets when in the unauthorized state. When a port is set to
the Authenticator role, it remains in the unauthorized state until the
client logs on by providing a username and password combination. In
the unauthorized state, the port only accepts EAP packets from the
client. All other ingress packets that the port might receive from the
client, including multicast and broadcast traffic, are discarded until the
supplicant has logged in. The options are:
Ingress - A port, when in the unauthorized state, discards all ingress
broadcast and multicast packets from the client, but forwards all
egress broadcast and multicast traffic to the same client.
Both - A port, when in the unauthorized state, does not forward ingress
or egress broadcast and multicast packets from or to the client until the
client logs in. This is the default.
Piggyback Mode
Controls who can use the switch port in cases where there are multiple
clients (e.g., the port is connected to an Ethernet hub). If set to
enabled, the port allows all clients on the port to piggy-back onto the
initial client’s authentication. The port forwards all packets, regardless
of the client, after one client has been authenticated. If set to Disabled,
the switch port forwards only those packets from the client who was
authenticated and discards packets from all other users.
7. Click Apply.
Changes to the authenticator settings are immediately implemented
on a port.
8. From the Configuration menu, select the Save Config option to
permanently save your changes. (This option is not displayed if there
are no changes to save.)