NETGEAR GS752TP Software Administration Manual page 179

GS752TP, GS728TP, and GS728TPP Gigabit Smart Switches
You can also select multiple check boxes to apply the same settings to the select ports,
or select the check box in the heading row to apply the same settings to all ports.
3. For the selected ports, specify the following settings:
• Port Control. Defines the port authorization state. The control mode is set only if the
link status of the port is link up. The possible field values are:
• Auto. Automatically detect the mode of the interface.
• Authorized. Place the interface into an authorized state without being
authenticated. The interface sends and receives normal traffic without client
port-based authentication.
• Unauthorized. Deny the selected interface system access by moving the
interface into unauthorized state. The switch cannot provide authentication
services to the client through the interface.
• MAC Based. Authentication is based on the MAC address. MAC authentication
requires that a guest VLAN be configured on the switch, and that the port be
enabled for guest VLAN. The guest VLAN is configured in the 802.1x
Configuration page, and the guest VLAN is enabled on the port in the next field in
this page.
• Guest VLAN. Enable or disable the Guest VLAN on the interface.
• Periodic Reauthentication. Enable or disable reauthentication of the supplicant for
the specified port. The default value is Disable. Changing the selection does not
change the configuration until you click the APPLY button.
• Reauthentication Period. Enter the time span in which the selected port is
reauthenticated. The valid range is 300–4294967295, and the default value is 3600
seconds.
• Quiet Period. Enter the amount of time that the switch remains in the quiet state
following a failed authentication exchange. The valid range is 30–65535, and the
default value is 60 seconds.
• Resending EAP. Enter the transmit period for the selected port. The transmit period
is the value, in seconds, of the timer used by the authenticator state machine on the
specified port to determine when to send an EAPOL EAP Request/Identify frame to
the supplicant. The valid range is 30–65535, and the default value is 30 seconds.
• Max EAP Requests. Enter the maximum number of requests for the selected port.
This value is the maximum number of times the authenticator state machine on this
port retransmits an EAPOL EAP Request/Identity before timing out the supplicant.
The valid range is 1–10, and the default value is 2.
• Supplicant Timeout. Enter the number of seconds that elapse before EAP requests
are resent to the user. The valid range is 1–65535, and the default is 30 seconds.
• Server Timeout. Enter the number of seconds that elapse before the switch resends
a request to the authentication server. The valid range is 1–65535, and the default is
30 seconds.
4. For the selected ports, view the following settings, which are not configurable:
• Control Direction. Displays the control direction for the specified port, which is
always Both. The control direction dictates the degree to which protocol exchanges
Managing Device Security
179