Siemens SIMATIC NET SCALANCE SC-600 Configuration Manual page 301

• MAC Authentication
Enable this option if you want end devices to be authenticated with the "MAC
Authentication" method.
If "Auto" is configured for "802.1x Auth. Control" and the "MAC Authentication" is
enabled, the timeout for the "802.1X" procedure is 5 seconds. If manual input is
necessary at a port for the authentication with the "802.1X" procedure, the 5 seconds
may not be adequate. To be able to run authentication using "802.1X", disable the
MAC authentication on this port.
• MAC Auth only on Timeout
If this check box is selected, MAC authentication is only possible after a 802.1X
timeout, but not after a failed 802.1X authentication. When the check box is not
selected, MAC authentication is possible both after an 802.1X timeout and after a
failed 802.1X authentication.
• Adopt RADIUS VLAN Assignment
The RADIUS server informs the IE switch of the VLAN to which the port will belong.
Enable this option if you want the information of the server to be taken into account.
The port can only be assigned to the VLAN, if the VLAN has been created on the
device. Otherwise Authentication is rejected.
If during authentication a port is assigned to a VLAN dynamically using this function,
assignment using the VLAN-ID or the VLAN name is possible. Configure the following
values on the RADIUS server:
– Tunnel-Type = VLAN
– Tunnel-Medium-Type = IEEE-802
– Tunnel-Private-Group-Id = VLAN-ID or VLAN-Name
The IE switch distinguishes as follows:
– VLAN ID: The RADIUS server transfers a numeric string for the parameter
– VLAN-Name: The RADIUS server transfers an alphanumeric string for the
SCALANCE SC-600 Web Based Management (WBM)
Configuration Manual, 10/2021, C79000-G8976-C475-03
"Tunnel-Private-Group-Id".
parameter "Tunnel-Private-Group-Id".
Configuring with Web Based Management
4.7 "Security" menu
301