FibroLAN Falcon-RX/812/G/A User Manual page 113

Falcon R-Class | User Guide
RADIUS-Assigned QoS
Enabled
RADIUS-Assigned VLAN
Enabled
Guest VLAN Enabled
Guest VLAN ID
Max. Reauth. Count
Allow Guest VLAN if EAPOL
Seen
113
RADIUS-assigned QoS provides a means to centrally control the traffic
class to which traffic coming from a successfully authenticated
supplicant is assigned on the switch. The RADIUS server must be
configured to transmit special RADIUS attributes to take advantage of
this feature (Refer to RADIUS-Assigned QoS Enabled within Port
Configuration-see below) for a detailed description).
The "RADIUS-Assigned QoS Enabled" checkbox provides a quick way
to globally enable/disable RADIUS-server assigned QoS Class
functionality. When checked, the individual ports' ditto setting
determines whether RADIUS-assigned QoS Class is enabled on that
port. When unchecked, RADIUS-server assigned QoS Class is disabled
on all ports.
RADIUS-assigned VLAN provides a means to centrally control the
VLAN on which a successfully authenticated supplicant is placed on
the switch. Incoming traffic will be classified to and switched on the
RADIUS-assigned VLAN. The RADIUS server must be configured to
transmit special RADIUS attributes to take advantage of this feature
(see RADIUS-Assigned VLAN Enabled within Port Configuration below)
for a detailed description.
The "RADIUS-Assigned VLAN Enabled" checkbox provides a quick way
to globally enable/disable RADIUS-server assigned VLAN functionality.
When checked, the individual ports' ditto setting determines whether
RADIUS-assigned VLAN is enabled on that port. When unchecked,
RADIUS-server assigned VLAN is disabled on all ports.
A Guest VLAN is a special VLAN - typically with limited network access
- on which 802.1X-unaware clients are placed after a network
administrator-defined timeout. The switch follows a set of rules for
entering and leaving the Guest VLAN as listed below.
The "Guest VLAN Enabled" checkbox provides a quick way to globally
enable/disable Guest VLAN functionality. When checked, the
individual ports' ditto setting determines whether the port can be
moved into Guest VLAN. When unchecked, the ability to move to the
Guest VLAN is disabled on all ports.
This is the value that a port's Port VLAN ID is set to if a port is moved
into the Guest VLAN. It is only changeable if the Guest VLAN option is
globally enabled. Valid values are in the range [1; 4095].
The number of times the switch transmits an EAPOL Request Identity
frame without response before considering entering the Guest VLAN
is adjusted with this setting. The value can only be changed if the
Guest VLAN
Valid values are in the range [1; 255].
The switch remembers if an EAPOL frame has been received on the
port for the lifetime of the port. Once the switch considers whether to
enter the Guest VLAN, it will first check if this option is enabled or
disabled.
If disabled (unchecked; default), the switch will only enter the Guest
VLAN if an EAPOL frame has not been received on the port for the
lifetime of the port. If enabled (checked), the switch will consider
option is globally enabled.