Configuring Port Security - Siemens RX1500 User Manual

RUGGEDCOM ROX II
User Guide
Section 3.18.3

Configuring Port Security

Port security (or Port Access Control) provides the ability to authenticate access through individual ports, either
through IEEE 802.1x authentication, static MAC address-based authorization, or both.
Using IEEE 802.1x authentication, ROX II authenticates a source device against a remote RADIUS
authentication server. Access is granted if the source device provides the proper credentials.
Using static MAC address-based authorization, ROX II authenticates the source device based on its MAC
address. Access is granted if the MAC address appears on the Static MAC Address table.
NOTE
ROX II only supports the authentication of one host per port that has the port security mode set to
802.1x or 802.1x/MAC-Auth.
NOTE
ROX II supports both PEAP and EAP-MD5. PEAP is more secure and is recommended over EAP-
MD5.
IMPORTANT!
Do not apply port security on core switch connections. Port security is applied at the end of the network
to restrict admission to specific devices.
To configure port security for a switched Ethernet port, do the following:
Change the mode to Edit Private or Edit Exclusive.
1.
2. Navigate to interface » switch » {interface} » port-security, where {interface} is the name given to the
switched Ethernet port. The Port Security and 802.1x Parameters forms appear.
Figure 99: Port Security Form
1. Security Mode List
Configuring Port Security
1
2
3
4
2. Auto Learn Box 3. Shutdown Time Box 4. Shutdown Enable Check Box
Chapter 3
Device Management
97