Configure Authenticator

To configure the 802.1X Authenticator Settings, click PAE Access Entity > Configure Authenticator:

Figure 6- 75. 802.1X Authenticator Settings window

To view the 802.1X Authenticator settings on a different switch in the switch stack, use the Unit pull-down menu to select that switch by its ID number in the switch stack.To configure the settings by port, click on the hyperlinked port number under the Port heading, which will display the following table to configure:

Figure 6- 76. 802.1X Authenticator Settings – Modify

Allied Telesyn AT-9724TS High-Density Layer 3 Stackable Gigabit Ethernet Switch

Page 87

Image 87

Allied Telesis AT-9724TS specifications Configure Authenticator, 75 .1X Authenticator Settings window

Contents

AT-9724TS Electrical Safety and Emission Statement Table of Contents RIP 133 Preface Purpose of This GuideHow This Guide is Organized Bold font Document Conventions European Support Numbers Regional Locations Returning Products FTP Server Tell Us What You Think Gigabit Ethernet Technology Switching TechnologyIntroduction Ethernet Technology Fast Ethernet Features Switch Description RFC1493 Bridge Installing the SFP portsPorts Front Panel Components Side-Panel Components LED IndicatorsLED Description Rear Panel Components Before You Connect to the Network InstallationPackage Contents Installing the Switch without a Rack Prepare Switch for installation on a desktop or shelf Installing the Switch in a Rack External Redundant Power System Mounting the Switch in a Standard 19 RackPower On Power Failure Connecting the Switch Switch To End NodeSwitch to Hub or Switch Stacking and the AT-9724TS Connecting To Network Backbone or Server Stacking in a Ring Architecture Stacking Limitations Utilizing a Ring Topology Introduction to Switch Management First Time Connecting to the Switch Snmp Settings Password Protection Traps MIBsIP Address Assignment Assigning the Switch an IP Address Connecting Devices to the Switch Introduction to Web-based Switch Configuration Login to Web ManagerIntroduction Web-based User Interface Areas of the User InterfaceAreaFunction Web Pages Configuring The Switch Switch InformationClick the Switch Information link in the Configuration menu Bootp IP AddressDhcp Specified or Management Station IP Addresses are assigned Setting the Switchs IP Address using the Console InterfaceAdvanced Settings Vlan Name Box Information Priority Stack Port ConfigurationLowest priority number in the stack is the Master switch To configure switch ports Flow Control Port DescriptionParameter Description State Speed/Duplex To configure a mirror port Port MirroringLink Aggregation Understanding Port Trunk Groups 10. Link Aggregation Group Configuration window Add 12. Lacp Port Setting and Lacp Port Information window Lacp Port Setting MAC Notification MAC Notification Global SettingsHistory size Setting is 1 second Specified.The default setting is Parameter Description Unit MAC Notification Port SettingsIgmp Igmp Versions 1 Type Meaning Vlan ID Igmp Snooping Static Router Ports VID Vlan ID Spanning Tree802.1s Mstp Following parameters can be set Edge Port STP Bridge Global Settings802.1w Rapid Spanning Tree Port Transition States 21. STP Bridge Global Settings STP compatible MST Configuration Table Msti Msti ID Msti ID of the Cist is 0 and cannot be altered Displays the Msti ID previously set by the userParameter Priority Msti Port InformationParameter Description Instance ID Internal cost 0=Auto Instance Priority STP Instance SettingsParameter Description Instance Type Instance Status Regional Root Bridge Forward DelayParameter Description Designated Root Bridge External Root Cost STP Port Settings Forwarding & Filtering Unicast Forwarding Vlan ID VIDMAC Address Not be a member of the Static Multicast Group Static Multicast ForwardingVID Multicast MAC Address VLANs Understanding Ieee 802.1p Priority Vlan DescriptionIeee 802.1Q VLANs Some relevant terms Transmit 802.1Q Vlan TagsIngress Filtering 39.Adding an Ieee 802.1Q Tag Bits Ingress Filtering Default VLANsPort Vlan ID Tagging and Untagging Vlan and Trunk Groups Switch PortsPort-based VLANs Vlan Segmentation Protocol Type Header in Hexadecimal Form Static Vlan EntryPage Protocol ID Advertisement Port Settings Tag None Egress Forbidden Gvrp Setting Acceptable Frame Type Traffic ControlGvrp Ingress Check Mode Admin StatePort Security Max. Learning Addr Be deleted MAC Address SwitchPort Lock Entries Vlan Name 18 QoS Advantages of QoSUnderstanding QoS Packets Disables the limitBandwidth Control Nolimit Parameter Description Strict Weight fairQoS Scheduling Mechanism Output Scheduling Configuring the Combination Queue Parameter Description Max. PacketsBe specified 802.1p User Priority 802.1p Default Priority Traffic Segmentation 55. Setup Forwarding Ports window 57. System Log Servers Add Following parameters can be set System Log Server Severity Status Choose Enabled or Disabled to activate or deactivateParameter Description Index Server IP Current Time Settings Sntp Settings Enter the month DST will start on, each year +/- Hhmm DST Repeating SettingsTime Zone and DST Minutes 61.Access Profile Table Ethernet Access Profile Table Configuring the Access Profile Table Vlan Protocol Port Shown below is the Packet Content Mask configuration windowSource IP Mask Destination IP Mask Dscp Offset Destination IP Access IDReplace Dscp Source IPPage Destination MAC Destination Source MAC Source 71.Access Rule Configuration Packet Content Mask Priority Offset 72.Access Rule Display window Packet Content Mask Port-Based Network Access Control MAC-Based Network Access ControlSwitch 75 .1X Authenticator Settings window Configure Authenticator Local Users PAE System Control From and ToCapability Backend State Initializing Ports for Port BasedFrom Auth PAE State Initializing Ports for MAC Based Reauthenticate Ports for Port Based Reauthenticate Ports for MAC Based Radius Server Setting Up IP Interfaces Layer 3 IP Networking Layer 3 Global Advanced Settings Network Number IP Address To setup IP Interfaces on the Switch Secondary MD5 Key Table ConfigurationParameter Description Interface Name Subnet Mask Route Source Metric Type Route Redistribution Settings ParameterDescription Dest Protocol Src Protocol Type Metric Static/Default RouteIP address of the Static/Default Route Following parameters may be set or viewed Permanently set on the switch and unconfigurable Route Preference SettingsBackup State IP address above Route Type Validity Range Default Value Ospf Inter Parameter Description RIPOspf Intra Static MAC address of the ARP entry Static ARP TableParameter Description IP Address IP address of the ARP entry RIP 1 Message RIP Command CodesRIP Configuration RIP Version 1 Message Format 102 Setting Up RIP Ospf Link-State AlgorithmShortest Path Algorithm Ospf Cost 104 Shortest Path Tree Areas and Border Routers Link-State Packets105 Backbone and Area Ospf AuthenticationMessage Digest Authentication MD-5 Simple Password Authentication Adjacencies on Point-to-Point Interfaces AdjacenciesDesignated Router Election Building Adjacency Hello Packet 109 Backup Designated Router Interface address on the networkDatabase Description Packet On the network MS bit Link-State Request PacketField Description Options Bit Link-State Update Packet Octets Version No111 Link-State Acknowledgment Packet Link-State Advertisement Formats112 Link State Checksum Successive Link State Sequence numbers Link State Advertisement HeaderRouter Links Advertisements Link State ID ASBR,AS External Link Link ID Field Description BitArea Field Description Type Field Description IP Type of Service that this metric refers toNetwork Links Advertisements Summary Link Advertisements Type of Service that the following cost is relevant to Autonomous Systems External Link AdvertisementsField Description Network Mask Current Route ID General Ospf SettingsOspf Area ID Setting Parameter Description Ospf Route ID Stub Import Summary LSA Ospf Interface SettingsStub Default Cost Parameter Description Area ID Retransmit Time Seconds Auth TypeAuth. Key ID Router Metric Type, as specified in the previous parameter Ospf Virtual Interface Settings Lsdb Type Ospf Area Aggregation SettingsOspf Host Route Settings Network Number Ospf domain Dhcp / Bootp RelayDhcp / Bootp Relay Information Following fields are configured for Ospf host route DNS Relay DHCP/BootP Relay Settings Mapping Domain Names to Addresses Domain Name ResolutionConfiguring DNS Relay Information DNS Relay Static Settings Vrrp Configuration Non-owner response Ping125 Vrrp Interface Settings VridDisplay Critical IP Address Admin. StatePreempt Mode Vrid Master IP Address Virtual IP AddressVirtual MAC Address Virtual Router State Igmp Interface Configuration IP Multicast Routing Protocol129 130 Dvmrp Interface ConfigurationDvmrp Global Setting Dvmrp Interface Settings Probe Interval PIM-DM Interface ConfigurationPIM-DM Configuration Neighbor Timeout Interval Seconds Previously defined IP interfaceDisplays the IP address for the IP interface named above Join/Prune Interval 133 Security ManagementSecurity IP User Accounts 134 Admin and User PrivilegesManagement Admin User User Account Management Access Authentication Control Policy & Parameters135 Enable Method List Applications Authentication SettingsAuthentication Server Group Settings Login Method List 137 Authentication Server Hosts TimeoutRetransmit 139 Login Method Lists 140 Enable Method Lists Method list Local Enable PasswordParameter Description Method List Name Method 1, 2, 3 142 Enable AdminLocal Enabled field will result in a fail message ParameterDescription Key File Name Cert.der Secure Socket Layer SSLDownload Certificate Parameter Description Certificate Type 144 Configuration SSH Configuration Secure Shell SSHSSH Algorithm AES256-CBC 3DES-CBCAES128-CBC AES192-CBC HMAC-RSA SSH User AuthenticationHMAC-SHA1 HMAC-MD5 Host IP Auth. ModeParameter Description User Name Host Name Snmp User Table Snmp Manager Priv-Protocol Group NameSnmp Version Auth-Protocol 151 Snmp View Table 152 Snmp Group TableParameter Description View Name Subtree OID Snmp Community Table Configuration Parameter Description Community Name Access RightContents of the MIBs on the Switch Snmp Host Table Snmp V3 User Name Snmp Engine IDParameter Description Host IP Address Community String or Parameter Description Time Interval MonitoringPort Utilization CPU Utilization Packets Received RX157 158 159 UMB Cast RX 160 Transmitted TX 161 Tx Packets Analysis window table for Bytes and Packets 162 Errors Over Size Crc ErrorRecord Number Under Size 164 SingColl SizeLateColl Because the medium was busy ExColl Packet Stacking Information Version Illustrations Device StatusProm Version A Star topology Runtime Version 168 MAC Address Vlan ID of the Vlan the port is a member Switch History LogFind Down menus Address 170 Igmp Snooping GroupIgmp Snooping Forwarding Parameter Description Sequence Port Access Control Authenticator StateBrowse Router Port 802.1x Authenticator StatisticsCapability is disabled Parameter Description Auth PAE State 173 Rx Invalid AuthenticatorRx Error Recognized Following fields can be viewed Authenticator Session Statistics Authenticator Diagnostics Radius Authentication 177 Radius Accounting Layer 3 Feature Browse IP Address178 179 Browse Routing TableBrowse ARP Table Browse IP Multicast Forwarding Table 180 Browse Igmp Group TableOspf Monitoring Browse Ospf Lsdb Table Ospf Virtual Neighbor Browse Ospf Neighbor Table Dvmrp Monitoring Browse Dvmrp Routing TableBrowse Dvmrp Neighbor Address Table 183 Browse Dvmrp Routing Next Hop TablePIM Monitoring PIM Neighbor Address Table Download Firmware Switch MaintenanceTftp Service Download Configuration File Firmware Information Upload ConfigurationMultiple Image Services Upload Log Size Config Firmware ImageUpdate Time BOX Ping Test Parameter Description ImageActive 188 ResetParameter Description Save Only save config Save Changes 189 Reboot DeviceFollowing menu is used to restart the Switch Logout EMC Appendix a Technical SpecificationsGeneral Physical & Environmental 191 Performance Vorsicht Lightning Danger Electrical Type Class 1 EquipmentGefahr Durch Blitzschlag Geräte DER Klasse Fare Under Uvejr Elektrisk Klasse 1-UDSTYRElektrische Toestellen VAN Klasse Elettricità Dispositivi DI Classe Métalliques accessibles à l’utilisateurSalamaniskuvaara Pericolo DI Fulmini Electrico Equipo DEL Tipo Clase Fare for LynnedslagFare Arbeid Ikke på utstyr eller Kabler i Tordenvær Peligro DE Rayos Fara FÖR Blixtnedslag Elektriskt TYP Klass 1 Utrustning196

Allied Telesis AT-9724TS Configure Authenticator, 75 .1X Authenticator Settings window

Models: AT-9724TS