NETGEAR S3300-28X (GS728TX) 24x1GE - Инструкция по эксплуатации - Страница 260

Managing Device Security 

260

S3300 Smart Managed Pro Switch 

-

Unauthorized

. The system denies the selected interface system access by 

moving the interface into unauthorized state. The switch cannot provide 
authentication services to the client through the interface.

-

MAC based

. This mode allows multiple supplicants connected to the same port to 

each authenticate individually. Each host connected to the port must authenticate 
separately in order to gain access to the network. The hosts are distinguished by 
their MAC addresses. 

•

Guest VLAN ID

. Specify the VLAN ID for the guest VLAN. The valid range is 0–4093. 

The default value is 0. Enter 0 to reset the Guest VLAN ID on the interface. The guest 
VLAN allows the port to provide a distinguished service to unauthenticated users. 
This feature provides a mechanism to allow users access to hosts on the guest VLAN.

•

Guest VLAN Period

. Specify the number of seconds that the selected port remains in 

the quiet state following a failed authentication exchange. The guest VLAN timeout 
must be a value in the range of 1–300. The default value is 90.

•

Unathenticated VLAN ID

. Specify the VLAN ID of the unauthenticated VLAN for the 

selected port. The valid range is 0–3965. The default value is 0. Hosts that fail the 
authentication might be denied access to the network or placed on a VLAN created 
for unauthenticated clients. This VLAN might be configured with limited network 
access.

•

Periodic Reauthentication

. Select 

Enable

 to allow periodic reauthentication of the 

supplicant for the specified port.

•

Reauthentication Period

. Specify the amount of time, in seconds, of the timer used 

by the authenticator state machine on this port to determine when reauthentication of 
the supplicant takes place. The reauthentication period must be a value in the range 
of 1–65535. The default value is 3600. Changing the value will not change the 
configuration until the 

Submit

 button is pressed. If this field is disabled, connected 

clients are not forced to reauthenticate periodically. 

•

Quiet Period

. Specify the number of seconds that the port remains in the quiet state 

following a failed authentication exchange.While in the quite state, the port does not 
attempt to acquire a supplicant.

•

Resending EAP

. Specify the transmit period for the selected port. The transmit period 

is the value, in seconds, of the timer used by the authenticator state machine on the 
specified port to determine when to send an EAPOL EAP Request/Identify frame to 
the supplicant.

•

Max EAP Requests

. Specify the maximum requests for the selected port. The 

maximum requests value is the maximum number of times the authenticator state 
machine on this port will retransmit an EAPOL EAP Request/Identity before timing out 
the supplicant.

•

Supplicant Timeout

. Specify the supplicant time-out for the selected port. The 

supplicant time-out is the value, in seconds, of the timer used by the authenticator 
state machine on this port to time-out the supplicant.

•

Server Timeout

. Specify the amount of time that lapses before the switch resends a 

request to the authentication server. 

4. 

Click the 

Apply

 button.