Cisco Small Business 200 Series Administration Manual page 277

Security: 802.1X Authentication
802. 1 X Configuration Through the GUI
• Current Port Control—Displays the current port authorization state. If the state is Authorized, the port
is either authenticated or the Administrative Port Control is Force Authorized. Conversely, if the state
is Unauthorized, then the port is either not authenticated or the Administrative Port Control is Force
Unauthorized.
• Administrative Port Control—Select the Administrative Port Authorization state. The options are:
- Force Unauthorized—Denies the interface access by moving the interface into the unauthorized
state. The device does not provide authentication services to the client through the interface.
- Auto—Enables port-based authentication and authorization on the device. The interface moves
between an authorized or unauthorized state based on the authentication exchange between the
device and the client.
- Force Authorized—Authorizes the interface without authentication.
• Open Access—Select to successfully authenticate the port even though authentication fails. See
Open Access.
• 802.1X Based Authentication—802.1X authentication is the only authentication method performed on
the port.
• MAC Based Authentication—Port is authenticated based on the supplicant MAC address. Only 8
MAC-based authentications can be used on the port.
For MAC authentication to succeed, the RADIUS server supplicant username and password
NOTE
must be the supplicant MAC address. The MAC address must be in lower case letters and entered
without the . or - separators; for example: 0020aa00bbcc.
• Web Based Authentication—Select to enable web-based authentication on the switch.
• Periodic Reauthentication—Select to enable port re-authentication attempts after the specified
Reauthentication Period.
• Reauthentication Period—Enter the number of seconds after which the selected port is
reauthenticated.
• Reauthenticate Now—Select to enable immediate port re-authentication.
• Authenticator State—Displays the defined port authorization state. The options are:
- Initialize—In process of coming up.
- Force-Authorized—Controlled port state is set to Force-Authorized (forward traffic).
If the port is not in Force-Unauthorized, it is in Auto Mode and the authenticator displays the
NOTE
state of the authentication in progress. After the port is authenticated, the state is shown as
Authenticated.
Cisco Small Business 200 Series Smart Switch Administration Guide
20
276