Cisco Sg3008 Manual

Security: 802.1X Authentication
Common Tasks
394 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
19
Common Tasks
Workflow 1: To enable 802.1x authentication on a por t:
STEP 1Click Security > 802.1X/MAC/Web Authentication > Properties.
STEP  2Enable Port-based Authentication.
STEP  3Select the Authentication Method .
STEP  4Click Apply, and the Running Configuration file is updated.
STEP  5Click Security > 802.1X/MAC/Web Authentication> Host and...

Security: 802.1X Authentication
Common Tasks
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  395
19
 
STEP  4Click Apply, and the Running Configuration file is updated.
Use the Copy Settings button to copy settings from one port to another.
Workflow 4: To configure the quiet period
STEP 1Click Security > 802.1X/MAC/Web Authentication > Port Authentication .
STEP  2Select a port, and click Edit.
STEP  3Enter the quiet period in the Quiet Period field....

Security: 802.1X Authentication
802.1X Configuration Through the GUI
396 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
19
802.1X Configuration Through the GUI
Defining 802.1X Properties
The 802.1X Properties page is used to globally enable 802.1X and define how 
ports are authenticated. For 802.1X to function, it must be activated both globally 
and individually on each port.
To define port-based authentication:
STEP 1Click Security > 802.1X/MAC/Web...

Security: 802.1X Authentication
802.1X Configuration Through the GUI
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  397
19
 
-If the port state changes from Authorized to Not Authorized, the port is 
added to the guest VLAN only after the Guest VL AN timeout has expired.
•Tr a p s—To enable traps, select one of more of the following options:
-802.1x Authentication Failure Traps—Select to generate a trap if 802.1x 
authentication fails.
-802.1x...

Security: 802.1X Authentication
802.1X Configuration Through the GUI
398 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
19
STEP 1Click Security > 802.1X/MAC/Web Authentication > Port Authentication.
This page displays authentication settings for all ports.
STEP  2Select a port, and click Edit.
STEP  3Enter the parameters.
•Interface—Select a port.
•Current Port Control—Displays the current port authorization state. If the 
state is Authorized, the...

Security: 802.1X Authentication
802.1X Configuration Through the GUI
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  399
19
 
After an authentication failure, and if guest VLAN is activated globally on 
a given port, the guest VLAN is automatically assigned to the 
unauthorized ports as an Untagged VLAN. 
-Cleared—Disables guest VLAN on the port.
•802.1X Based Authentication—802.1X authentication is the only 
authentication method performed on the...

Security: 802.1X Authentication
802.1X Configuration Through the GUI
400 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
19
•Maximum WBA Login Attempts—Available only in Layer 2 switch mode. 
Enter the maximum number of login attempts allowed on the interface. 
Select either Infinite for no limit or User Defined to set a limit.
•Max WBA Silence Period—Available only in Layer 2 switch mode. Enter the 
maximum length of the silent period allowed on the...

Security: 802.1X Authentication
802.1X Configuration Through the GUI
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  401
19
 
To define 802.1X advanced settings for ports:
STEP 1Click Security > 802.1X/MAC/Web Authentication > Host and Session 
Authentication.
802.1X authentication parameters are described for all ports. All fields except the 
following are described in the Edit Host and Session Authentication page.
•Number of Single Host...

Security: 802.1X Authentication
802.1X Configuration Through the GUI
402 Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version) 
19
Viewing Authenticated Hosts
To view details about authenticated users:
STEP 1Click Security > 802.1X/MAC/Web Authentication > Authenticated Hosts.
This page displays the following fields:
•User Name—Supplicant names that were authenticated on each port.
•Port—Number of the port.
•Session Time (DD:HH:MM:SS)—Amount of time that the...

Security: 802.1X Authentication
802.1X Configuration Through the GUI
Cisco Small Business 200, 300 and 500 Series Managed Switch Administration Guide (Internal Version)  403
19
 
Web Authentication Customization
This page enables designing web-based authentication pages in various 
languages.
You can add up to 4 languages.
NOTEUp to 5 HTTP users and one HTTPS user can request web-based authentication at 
the same time. When these users are authenticated, more users can request 
authentication.
To add a...