Cisco Small Business 200 Series Administration Manual page 273

Security: 802.1X Authentication
Authenticator Overview
This is described in the following:
Figure 1 802.1x-Based Authentication
The device supports the 802.1x authentication mechanism, as described in the standard, to authenticate
and authorize 802.1x supplicants.
Violation Mode
In single-host mode you can configure the action to be taken when an unauthorized host on authorized port
attempts to access the interface. This is done in the Host and Session Authentication page.
The following options are available:
• restrict—Generates a trap when a station, whose MAC address is not the supplicant MAC address,
attempts to access the interface. The minimum time between the traps is 1 second. These frames
are forwarded, but their source addresses are not learned.
• protect—Discard frames with source addresses that are not the supplicant address.
• shutdown—Discard frames with source addresses that are not the supplicant address and
shutdown the port.
You can also configure the device to send SNMP traps, with a configurable minimum time between
consecutive traps. If seconds = 0, traps are disabled. If minimum time is not specified, it defaults to 1
second for the restrict mode and 0 for the other modes.
Cisco Small Business 200 Series Smart Switch Administration Guide
20
272