Configuring The Mac Authentication Reauthentication Time; Figure 3-61 Network Access Configuration - Samsung iES4028F Management Manual

Table of Contents

Advertisement

• Configured static MAC addresses are added to the secure address table when
seen on a switch port. Static addresses are treated as authenticated without
sending a request to a RADIUS server.
• When port status changes to down, all MAC addresses are cleared from the secure
MAC address table. Static VLAN assignments are not restored.
• The RADIUS server may optionally return a VLAN identifier list to be applied to the
switch port. The following attributes need to be configured on the RADIUS server.
• Tunnel-Type = VLAN
• Tunnel-Medium-Type = 802
• Tunnel-Private-Group-ID = 1u,2t
The VLAN identifier list is carried in the RADIUS "Tunnel-Private-Group-ID"
attribute. The VLAN list can contain multiple VLAN identifiers in the format
"1u,2t,3u" where "u" indicates an untagged VLAN and "t" a tagged VLAN.

Configuring the MAC Authentication Reauthentication Time

MAC address authentication is configured on a per-port basis, however there are
two configurable parameters that apply globally to all ports on the switch.
Command Attributes
• Authenticated Age – The secure MAC address table aging time. This parameter
setting is the same as switch MAC address table aging time and is only
configurable from the Address Table, Aging Time web page (see page 3-164).
(Default: 300 seconds)
• MAC Authentication Reauthentication Time – Sets the time period after which
a connected MAC address must be reauthenticated. When the reauthentication
time expires for a secure MAC address, it is reauthenticated with the RADIUS
server. During the reauthentication process traffic through the port remains
unaffected. (Default: 1800 seconds; Range: 120-1000000 seconds)
• MAC Address Aging – Enables aging for authenticated MAC addresses stored in
the secure MAC address table. (Default: Disabled)
Authenticated MAC addresses are stored as dynamic entries in the switch's secure
MAC address table and are removed when the aging time expires.
The maximum number of secure MAC addresses supported for the switch system
is 1024.
Web – Click Security, Network Access, Configuration.
[VLAN ID list]

Figure 3-61 Network Access Configuration

General Security Measures
3
3-103

Hide quick links:

Advertisement

Table of Contents
loading

This manual is also suitable for:

Ies4028fpIes4024gp

Table of Contents