D-Link DES-1228 Manual page 50

5 Configuration
D-Link Web Smart Switch User Manual
Authentication Protocol over LANs (EAPOL) to exchange authentication protocol client identity (such as a
user name) with the client, and forward it to another remote RADIUS authentication server to verify access
rights. The EAP packet from the RADIUS server also contains the authentication method to be used. The
client can reject the authentication method and request another, depending on the configuration of the client
software and the RADIUS server. Depending on the authenticated results, the port is either made available
to the user, or the user is denied access to the network.
The RADIUS servers make the network a lot easier to manage for the administrator by gathering and storing
the user lists.
Figure 76 – Security > 802.1X > 802.1X Setting
By default, 802.1X is disabled. To use EAP for security, select enabled and set the 802.1X Global Settings
for the Radius Server and applicable authentication information.
RADIUS Server IP: The IP address of the external Radius Server. You need to specify an RADIUS server to
enable 802.1X authentication.
Key: Masked password matching the Radius Server Key. The max. length is 32 characters.
Confirm Key: Enter the Key a second time for confirmation.
TxPeriod (1 – 65535 sec): This sets the TxPeriod of time for the authenticator PAE state machine. This
value determines the period of an EAP Request/Identity packet transmitted to the client. Default is 24
seconds.
ReAuthEnabled: This function is to determine whether regular re-authentication will take place on this
port(s). When the 802.1X function is enabled, the switch sends an EAP-request/identity packet to client. The
ReAuthEnabled function is by default disabled.
QuietPeriod (0 – 65535 sec): Sets the number of seconds that the switch remains in the quiet state
following a failed authentication exchange with the client. Default is 80 seconds
SuppTimeout (1 – 65535 sec): This value determines timeout conditions in the exchanges between the
Authenticator and the client. Default is 12 seconds.
ServerTimeout (1 – 65535 sec): Sets the amount of time the switch waits for a response from the client
before resending the response to the authentication server. Default is 16 seconds.
MaxReq (1 – 10): This parameter specifies the maximum number of times that the switch retransmits an
EAP request (md-5challnege) to the client before it times out the authentication session. Default is 5 times.
ReAuthPeriod (1 – 4294967295 sec): This command affects the behavior of the switch only if periodic re-
authentication is enabled. Default is 3600.
To establish 802.1X port-specific assignments, select the From Ports / To Ports and select Enable.
802.1X Port Access Control: Three type of Port Access Control State can be "Force Authorized", "Force
UnAuthorized", and "Auto".
Select Force Authorized to disable 802.1X and cause the port to transition to the authorized state without
any authentication exchange required. This means the port transmits and receives normal traffic without
802.1X-based authentication of the client.
46