Defining Host And Session Authentication - Cisco 300 Series Administration Manual

19
STEP 4
400
• Maximum WBA Login Attempts—Available only in Layer 2 switch mode.
Enter the maximum number of login attempts allowed on the interface.
Select either Infinite for no limit or User Defined to set a limit.
• Max WBA Silence Period—Available only in Layer 2 switch mode. Enter the
maximum length of the silent period allowed on the interface. Select either
Infinite for no limit or User Defined to set a limit.
• Max Hosts—Enter the maximum number of authorized hosts allowed on the
interface. Select either Infinite for no limit or User Defined to set a limit.
Set this value to 1 to simulate single-host mode for web-based
NOTE
authentication in multi-sessions mode.
• Quiet Period—Enter the number of seconds that the device remains in the
quiet state following a failed authentication exchange.
• Resending EAP—Enter the number of seconds that the device waits for a
response to an Extensible Authentication Protocol (EAP) request/identity
frame from the supplicant (client) before resending the request.
• Max EAP Requests—Enter the maximum number of EAP requests that can
be sent. If a response is not received after the defined period (supplicant
timeout), the authentication process is restarted.
• Supplicant Timeout—Enter the number of seconds that lapses before EAP
requests are resent to the supplicant.
• Server Timeout—Enter the number of seconds that lapses before the
device resends a request to the authentication server.
Click Apply. The port settings are written to the Running Configuration file.

Defining Host and Session Authentication

The Host and Session Authentication page enables defining the mode in which
802. 1 X operates on the port and the action to perform if a violation has been
detected.
See Port Host Modes
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)
for an explanation of these modes.
Security: 802.1X Authentication
802. 1 X Configuration Through the GUI