DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet Switch User Manual

 

 

This window allows you to set the following features:

 

 

 

 

 

 

 

Parameter

 

Description

 

 

 

 

 

 

 

From Port / To Port

 

Enter the port or ports to be set.

 

 

 

 

 

 

 

QuietPeriod

 

This allows you to set the number of seconds that the Switch remains in the quiet state

 

 

(0-65535)

 

following a failed authentication exchange with the client. The default setting is 60 seconds.

 

 

 

 

 

 

 

SuppTimeout

 

This value determines timeout conditions in the exchanges between the Authenticator and the

 

 

(1-65535)

 

client. The default setting is 30 seconds.

 

 

 

 

 

 

 

ServerTimeout

 

This value determines timeout conditions in the exchanges between the Authenticator and the

 

 

(1-65535)

 

authentication server. The default setting is 30 seconds.

 

 

 

 

 

 

 

MaxReq (1-10)

 

The maximum number of times that the Switch will retransmit an EAP Request to the client

 

 

 

 

before it times out of the authentication sessions. The default setting is 2.

 

 

 

 

 

 

 

TxPeriod (1-65535)

 

This sets the TxPeriod of time for the authenticator PAE state machine. This value determines

 

 

 

 

the period of an EAP Request/Identity packet transmitted to the client. The default setting is

 

 

 

 

30 seconds.

 

 

 

 

 

 

 

ReAuthPeriod

 

A constant that defines a nonzero number of seconds between periodic reauthentication of

 

 

(1-65535)

 

the client. The default setting is 3600 seconds.

 

 

 

 

 

 

 

ReAuthentication

 

Determines whether regular reauthentication will take place on this port. The default setting is

 

 

 

 

Disabled.

 

 

 

 

 

 

 

PortControl

 

This allows you to control the port authorization state.

 

 

 

 

Select forceAuthorized to disable 802.1X and cause the port to transition to the authorized

 

 

 

 

state without any authentication exchange required. This means the port transmits and

 

 

 

 

receives normal traffic without 802.1X-based authentication of the client.

 

 

 

 

If forceUnauthorized is selected, the port will remain in the unauthorized state, ignoring all

 

 

 

 

attempts by the client to authenticate. The Switch cannot provide authentication services to

 

 

 

 

the client through the interface.

 

 

 

 

If Auto is selected, it will enable 802.1X and cause the port to begin in the unauthorized state,

 

 

 

 

allowing only EAPOL frames to be sent and received through the port. The authentication

 

 

 

 

process begins when the link state of the port transitions from down to up, or when an

 

 

 

 

EAPOL-start frame is received. The Switch then requests the identity of the client and begins

 

 

 

 

relaying authentication messages between the client and the authentication server.

 

 

 

 

The default setting is Auto.

 

 

 

 

 

 

 

Capability

 

This allows the 802.1X Authenticator settings to be applied on a per-port basis. Select

 

 

 

 

Authenticator to apply the settings to the port. When the setting is activated A user must pass

 

 

 

 

the authentication process to gain access to the network. Select None disable 802.1X

 

 

 

 

functions on the port.

 

 

 

 

 

 

 

Direction

 

Sets the administrative-controlled direction to either in or both.

 

 

 

 

If in is selected, control is only exerted over incoming traffic through the port you selected in

 

 

 

 

the first field.

 

 

 

 

If both are selected, control is exerted over both incoming and outgoing traffic through the

 

 

 

 

controlled port selected in the first field.

 

 

 

 

 

 

 

Forward EAPOL

 

This enables or disables the Switch retransmit EAPOL PDU Request on a per port basis.

 

 

PDU On Port

 

 

 

 

 

 

 

 

 

Max User On Port

 

Specify the maximum number of users that can be learned via 802.1X authentication.

 

 

(1-128)

 

 

 

 

 

 

 

 

Click Apply to implement your configuration changes.

 

 

 

161

 

Page 172
Image 172
D-Link DGS-3700 QuietPeriod, SuppTimeout, ServerTimeout, MaxReq, TxPeriod, ReAuthPeriod, ReAuthentication, PortControl