Technical Reference; Ieee 802.1X - ZyXEL Communications XS3800-28 User Manual

Table 81 Advanced Application > Port Authentication > MAC Authentication (continued)
LABEL
Timeout
SLOT
Port
*
Active
Trusted-VLAN List
Apply
Cancel

18.3 Technical Reference

This section provides technical background information on the topics discussed in this chapter.

18.3.1 IEEE 802.1x

The IEEE 802.1x is a standard for authentication as well as providing additional accounting and control
features. It can be implemented both on wired and wireless networks. It is supported by Windows XP and
a number of network devices. Some advantages of IEEE 802.1x are:
• User based identification
• Support for RADIUS (Remote Authentication Dial In User Service, RFC 2138, 2139) for centralized user
profile and accounting management on a network RADIUS server.
• Support for EAP (Extensible Authentication Protocol, RFC 2486) that allows additional authentication
methods to be deployed with no changes to the switch or the wired clients.
Chapter 18 Port Authentication
DESCRIPTION
Specify the amount of time before the Switch allows a client MAC address that fails
authentication to try and authenticate again. Maximum time is 3000 seconds.
When a client fails MAC authentication, its MAC address is learned by the MAC address table
with a status of denied. The timeout period you specify here is the time the MAC address entry
stays in the MAC address table until it is cleared. If you specify 0 for the timeout value, the
Switch uses the Aging Time configured in the Switch Setup screen.
Note: If the Aging Time in the Switch Setup screen is set to a lower value, then it
supersedes this setting. See
This field appears only in stacking mode. Click the drop-down list to choose the slot number of
the Switch in a stack.
This field displays the port number. In stacking mode, the first number represents the slot ID and
the second is the port number. Please note that the default stacking ports (the last four ports of
your Switch) cannot be configured. They are reserved for stacking only.
Use this row to make the setting the same for all ports. Use this row first and then make
adjustments on a port-by-port basis.
Note: Changes in this row are copied to all the ports as soon as you make them.
Select this check box to permit MAC authentication on this port. You must first allow MAC
authentication on the Switch before configuring it on each port.
Enter the ID number(s) of the trusted VLAN(s) (separated by a comma). If a client's VLAN ID is
specified here, the client can access the port and the connected networks without MAC
authentication.
Click Apply to save your changes to the Switch's run-time memory. The Switch loses these
changes if it is turned off or loses power, so use the Save link on the top navigation panel to
save your changes to the non-volatile memory when you are done configuring.
Click Cancel to begin configuring this screen afresh.
XS3800-28 User's Guide
Section 8.3 on page
216
86.