Cisco 500 Series Administration Manual page 501

22
499
page.
After an authentication failure, and if guest VLAN is activated globally on
a given port, the guest VLAN is automatically assigned to the
unauthorized ports as an Untagged VLAN.
- Cleared—Disables guest VLAN on the port.
• Open Access—Select to successfully authenticate the port even though
authentication fails. See
• 802.1X Based Authentication—802.1X authentication is the only
authentication method performed on the port.
• MAC Based Authentication—Port is authenticated based on the supplicant
MAC address. Only 8 MAC-based authentications can be used on the port.
For MAC authentication to succeed, the RADIUS server supplicant
NOTE
username and password must be the supplicant MAC address. The MAC
address must be in lower case letters and entered without the . or -
separators; for example: 0020aa00bbcc.
• Web Based Authentication—This is only available in Layer 2 switch mode or
on SG500XG and SG500X. Select to enable web-based authentication on
the switch.
• Periodic Reauthentication—Select to enable port re-authentication
attempts after the specified Reauthentication Period.
• Reauthentication Period—Enter the number of seconds after which the
selected port is reauthenticated.
• Reauthenticate Now—Select to enable immediate port re-authentication.
• Authenticator State—Displays the defined port authorization state. The
options are:
- Initialize—In process of coming up.
- Force-Authorized—Controlled port state is set to Force-Authorized
(forward traffic).
- Force-Unauthorized—Controlled port state is set to Force-Unauthorized
(discard traffic).
If the port is not in Force-Authorized or Force-Unauthorized, it is in
NOTE
Auto Mode and the authenticator displays the state of the authentication
in progress. After the port is authenticated, the state is shown as
Authenticated.
Open Access.
Cisco 500 Series Stackable Managed Switch Administration Guide
Security: 802.1X Authentication
802. 1 X Configuration Through the GUI