Cisco SGE2000 - - Gigabit Switch Administration Manual page 95

Configuring Device Security
Defining 802. 1 X
Cisco Small Business SFE/SGE Managed Switches Administration Guide
-
ForceUnauthorized
moving the interface into unauthorized state. The device cannot provide
authentication services to the client through the interface.
•
Enable Guest VLAN — Specifies whether the Guest VLAN is enabled on the
device. The possible field values are:
-
Checked
— Enables using a Guest VLAN for unauthorized ports. If a
Guest VLAN is enabled, the unauthorized port automatically joins the
VLAN selected in the
-
Unchecked
the default.
•
Authentication Method — Defines the user authentication method. The
possible field values are:
-
802. 1 x Only
-
MAC Only — If enabled, causes the port to transition to the authorized or
unauthorized state based on the supplicant's MAC address.
-
802. 1 x & MAC
the case of 802. 1 x + MAC, 802. 1 x takes precedence.
•
Enable Periodic Reauthentication — Permits port reauthentication during the
specified Reauthentication Period (see below). The possible field values are:
-
Checked
— Enables immediate port reauthentication. This is the default
value.
-
Unchecked
•
Reauthentication Period — Specifies the number of seconds in which the
selected port is reauthenticated (Range: 300-4294967295). The field default is
3600 seconds.
•
Reauthenticate Now — Specifies that authentication is applied on the device
when the Apply button is pressed.
-
Checked
— Enables immediate port reauthentication.
-
Unchecked
settings above.
•
Authenticator State — Specifies the port authorization state. The possible field
values are as follows:
— Denies the selected interface system access by
VLAN List
field.
— Disables port-based authentication on the device. This is
— Enables only 802. 1 x authentication on the device.
— Enables 802. 1 x + MAC Authentication on the device. In
— Disables port reauthentication.
— Port authentication according to the Reauthentication
4
86