Defining Host And Session Authentication - Cisco SF500-24 Administration Manual

Configuring Security
Configuring 802. 1 X
STEP 4
Cisco 500 Series Stackable Managed Switch Administration Guide
If the port is not in Force-Authorized or Force-Unauthorized, it is in
NOTE
Auto Mode and the authenticator displays the state of the authentication
in progress. After the port is authenticated, the state is shown as
Authenticated.
• Time Range—Enable a limit on the time that the specific port is authorized
for use if 802. 1 x has been enabled (Port -Based authentication is checked).
• Time Range Name—Select the profile that specifies the time range.
• Quiet Period—Enter the number of seconds that the switch remains in the
quiet state following a failed authentication exchange.
• Resending EAP—Enter the number of seconds that the switch waits for a
response to an Extensible Authentication Protocol (EAP) request/identity
frame from the supplicant (client) before resending the request.
• Max EAP Requests—Enter the maximum number of EAP requests that can
be sent. If a response is not received after the defined period (supplicant
timeout), the authentication process is restarted.
• Supplicant Timeout—Enter the number of seconds that lapses before EAP
requests are resent to the supplicant.
• Server Timeout—Enter the number of seconds that lapses before the
switch resends a request to the authentication server.
• Termination Cause—Displays the reason for which the port authentication
was terminated, if applicable.
Click Apply. The port settings are written to the Running Configuration file.

Defining Host and Session Authentication

The Host and Session Authentication page enables defining the mode in which
802. 1 X operates on the port and the action to perform if a violation has been
detected.
The 802. 1 X modes are:
• Single—Only a single authorized host can access the port. (Port Security
cannot be enabled on a port in single-host mode.)
• Multiple Host (802. 1 X)—Multiple hosts can be attached to a single 802. 1 X-
enabled port. Only the first host must be authorized, and then the port is
18
326