Tripp Lite NGI-S04C2 Owner's Manual page 80

When the client provides the login credentials, the Switch sends an authentication request
to a RADIUS server. The RADIUS server validates whether this client is allowed access
to the port.
Local User Accounts
By storing user profiles locally on the Switch, your Switch is able to authenticate users
without interacting with a network authentication server. However, there is a limit on the
number of users you may authenticate in this way.
Guest VLAN:
The Guest VLAN in IEEE 802.1x port authentication on the switch to provide limited
services to clients, such as downloading the IEEE 802.1x client. These clients might be
upgrading their system for IEEE 802.1x authentication.
When you enable a guest VLAN on an IEEE 802.1x port, the switch assigns clients to a
guest VLAN when the switch does not receive a response to its EAP request/identity
frame or when EAPOL packets are not sent by the client.
Port Parameters:
Admin Control Direction:

both - drop incoming and outgoing packets on the port when a user has not
passed 802.1x port authentication.
in - drop only incoming packets on the port when a user has notpassed802.1x
port authentication.
Re-authentication:

Specify if a subscriber has to periodically re-enter his or her user name and
password to stay connected to the port.
Reauth-period:

Specify how often a client has to re-enter his or her username and password to stay
connected to the port. The acceptable range for this field is 0 to 65535 seconds.
Port Control Mode:

Auto
Force-authorized
Force-unauthorized : Users cannot access network.
: Users can access network after authenticating.
: Users can access network without authentication.
80