When authentication is complete, the RADIUS server sends a special packet containing a success or failure indication. Besides forwarding this decision to the supplicant, the switch uses it to open up or block traffic on the switch port connected to the supplicant. (For a more detailed discussion of the Port-based 802.1X Admin State, see the online help.) MAC-based Auth.: Unlike port-based 802.1X, MAC-based authentication is not a standard, but merely a best-practices method adopted by the industry. In MAC-based authentication, users are called clients, and the switch acts as the supplicant on behalf of clients. When authentication is complete, the RADIUS server sends a success or failure indication, which in turn causes the switch to open up or block traffic for that particular client, using the Port Security module. Only then will frames from the client be forwarded on the switch. . (For a more detailed discussion of the MAC-based authentication Admin State, see the online help.)
Port State Set or show the current state of the port:
Globally Disabled:
NAS is globally disabled.
Link Down:
NAS is globally enabled, but there is no link on the port.
Authorized:
The port is in Force Authorized or a single-supplicant mode
and the supplicant is authorized.
Unauthorized: The port is in Force Unauthorized or a single-supplicant mode and the supplicant is not successfully authorized by the RADIUS server.
X Auth/Y Unauth:
The port is in a multi-supplicant mode. Currently X
clients are authorized and Y are unauthorized.
Restart Two buttons are available for each row. The buttons are only enabled when authentication is globally enabled and the port’s Admin State is in an EAPOL based or MAC based mode. Clicking these buttons will not cause settings changed on the page to take effect.
Reauthenticate: Schedules a reauthentication whenever the quiet-period of the port runs out (EAPOL-based authentication). For MAC-based authentication, reauthentication will be attempted immediately. The button only has effect for successfully authenticated clients on the port and will not cause the clients to get temporarily unauthorized. Reinitialize: Forces a reinitialization of the clients on the port and thereby a reauthentication immediately. The clients will transfer to the unauthorized state while the reauthentication is in progress.
SMB - CLI UM
Rev: 1.1
Page 111 of 275
www.amphenol-socapex.com
Tel : +33(0)4.50.89.28.00
Made with FlippingBook interactive PDF creator