Ubiquiti EdgeSwitch ES-24-250W Administration Manual page 211

EdgeSwitch Administration Guide
™
Field
Supplicant Options – The fields in this section can be changed only when the selected port is configured as a supplicant port (that is,
the PAE Capabilities field is set to Supplicant).
Control Mode
User Name
Authentication Period
Start Period
Held Period
Maximum Start Messages
Use the buttons to perform the following tasks:
• If you change any settings on this page, click Submit to apply the changes.
• Click Refresh to refresh the page with the most current data from the switch.
To retain the changes across the switch's next power cycle, click System > Configuration Storage > Save.
Ubiquiti Networks, Inc.
Port Access Control Port Configuration Fields (Continued)
Description
The port-based access control mode on the port, which is one of the following:
• Auto The port is in an unauthorized state until a successful authentication exchange has taken
place between the supplicant port, the authenticator port, and the authentication server.
• Force Unauthorized The port is placed into an unauthorized state and is automatically denied
system access.
• Force Authorized The port is placed into an authorized state and does not require client port-
based authentication to be able to send and receive traffic.
The name the port uses to identify itself as a supplicant to the authenticator port. The menu includes
the users that are configured for system management. When authenticating, the supplicant provides
the password associated with the selected User Name.
The amount of time the supplicant port waits to receive a challenge from the authentication server.
If the configured Authentication Period expires, the supplicant retransmits the authentication request
until it is authenticated or has sent the number of messages configured in the Maximum Start
Messages field.
The amount of time the supplicant port waits for a response from the authenticator port after sending
a Start packet. If no response is received, the supplicant retransmits the Start packet.
The amount of time the supplicant port waits before contacting the authenticator port after an active
802.1X session fails.
The maximum number of Start packets the supplicant port sends to the authenticator port without
receiving a response before it considers the authenticator to be 802.1X-unaware.
Managing Device Security
210