Defining Host And Session Authentication - Cisco 500 Series Administration Manual

Security: 802.1X Authentication
802. 1 X Configuration Through the GUI
STEP 4
Cisco 500 Series Stackable Managed Switch Administration Guide
• Time Range—Enable a limit on the time that the specific port is authorized
for use if 802.1x has been enabled (Port -Based authentication is checked).
• Time Range Name—Select the profile that specifies the time range.
• Maximum WBA Login Attempts—Available only in Layer 2 switch mode or
on SG500XG and SG500X. Enter the maximum number of login attempts
allowed on the interface. Select either Infinite for no limit or User Defined to
set a limit.
• Max WBA Silence Period—Available only in Layer 2 switch mode or on
SG500XG and SG500X. Enter the maximum length of the silent period
allowed on the interface. Select either Infinite for no limit or User Defined to
set a limit.
• Max Hosts—Enter the maximum number of authorized hosts allowed on the
interface. Select either Infinite for no limit or User Defined to set a limit.
Set this value to 1 to simulate single-host mode for web-based
NOTE
authentication in multi-sessions mode.
• Quiet Period—Enter the number of seconds that the device remains in the
quiet state following a failed authentication exchange.
• Resending EAP—Enter the number of seconds that the device waits for a
response to an Extensible Authentication Protocol (EAP) request/identity
frame from the supplicant (client) before resending the request.
• Max EAP Requests—Enter the maximum number of EAP requests that can
be sent. If a response is not received after the defined period (supplicant
timeout), the authentication process is restarted.
• Supplicant Timeout—Enter the number of seconds that lapses before EAP
requests are resent to the supplicant.
• Server Timeout—Enter the number of seconds that lapses before the
device resends a request to the authentication server.
Click Apply. The port settings are written to the Running Configuration file.

Defining Host and Session Authentication

The Host and Session Authentication page enables defining the mode in which
802.1X operates on the port and the action to perform if a violation has been
detected.
22
500