ZyXEL Communications GS3700 Series Guide de l'utilisateur télécharger pdf (Page 156)

Chapter 16 Port Authentication

GS3700/XGS3700 Series User’s Guide

156

16.2.2 Guest VLAN

When 802.1x port authentication is enabled on the Switch and its ports, clients that do not have the

correct credentials are blocked from using the port(s). You can configure your Switch to have one

VLAN that acts as a guest VLAN. If you enable the guest VLAN (102 in the example) on a port (2 in

the example), the user (A in the example) that is not IEEE 802.1x capable or fails to enter the

correct username and password can still access the port, but traffic from the user is forwarded to

the guest VLAN. That is, unauthenticated users can have access to limited network resources in the

same guest VLAN, such as the Internet. The rights granted to the Guest VLAN depends on how the

network administrator configures switches or routers with the guest network feature.

Figure 92 Guest VLAN Example

Max-Req Specify the number of times the Switch tries to authenticate client(s) before sending

unresponsive ports to the Guest VLAN.

This is set to 2 by default. That is, the Switch attempts to authenticate a client twice. If

the client does not respond to the first authentication request, the Switch tries again. If

the client still does not respond to the second request, the Switch sends the client to the

Guest VLAN. The client needs to send a new request to be authenticated by the Switch

again.

Reauth Specify if a subscriber has to periodically re-enter his or her username and password to

stay connected to the port.

Reauth-period Specify the length of time required to pass before a client has to re-enter his or her

username and password to stay connected to the port.

Quiet-period Specify the number of seconds the port remains in the HELD state and rejects further

authentication requests from the connected client after a failed authentication exchange.

Tx-period Specify the number of seconds the Switch waits for client’s response before re-sending

an identity request to the client.

Supp-Timeout Specify the number of seconds the Switch waits for client’s response to a challenge

request before sending another request.

Apply Click Apply to save your changes to the Switch’s run-time memory. The Switch loses

these changes if it is turned off or loses power, so use the Save link on the top navigation

panel to save your changes to the non-volatile memory when you are done configuring.

Cancel Click Cancel to begin configuring this screen afresh.

Table 64 Advanced Application > Port Authentication > 802.1x (continued)

LABEL DESCRIPTION

Internet

VLAN 100

VLAN 102

1 2 ... 151 152 153 154 155 156 157 158 159 160 161 ... 415 416

Pas de commentaire

ZyXEL Communications GS3700 Series Guide de l'utilisateur Page 156