Microsens MS453490M Management Guide User Manual

Page 327

Advertising
background image

C

HAPTER

14

| Security Measures

Configuring 802.1X Port Authentication

– 327 –

P

ARAMETERS

These parameters are displayed:

Port Authentication Status – Sets the global setting for 802.1X.

(Default: Disabled)

EAPOL Pass Through – Passes EAPOL frames through to all ports in

STP forwarding state when dot1x is globally disabled.

(Default: Disabled)
When this device is functioning as intermediate node in the network

and does not need to perform dot1x authentication, EAPOL Pass

Through can be enabled to allow the switch to forward EAPOL frames

from other switches on to the authentication servers, thereby allowing

the authentication process to still be carried out by switches located on

the edge of the network.
When this device is functioning as an edge switch but does not require

any attached clients to be authenticated, EAPOL Pass Through can be

disabled to discard unnecessary EAPOL traffic.

Identity Profile User Name – The dot1x supplicant user name.

(Range: 1-8 characters)
The global supplicant user name and password are used to identify this

switch as a supplicant when responding to an MD5 challenge from the

authenticator. These parameters must be set when this switch passes

client authentication requests to another authenticator on the network

(see

"Configuring Port Supplicant Settings for 802.1X" on page 332

).

Set Password – Allows the dot1x supplicant password to be entered.

Indentity Profile Password – The dot1x supplicant password used to

identify this switch as a supplicant when responding to an MD5

challenge from the authenticator. (Range: 1-8 characters)

Confirm Profile Password – This field is used to confirm the dot1x

supplicant password.

W

EB

I

NTERFACE

To configure global settings for 802.1X:

1.

Click Security, Port Authentication.

2.

Select Configure Global from the Step list.

3.

Enable 802.1X globally for the switch, and configure EAPOL Pass
Through if required. Then set the user name and password to use when

the switch responds an MD5 challenge from the authentication server.

4.

Click Apply

Advertising