Cisco SRW2024P User Guide - Page 44

Chapter 5 Advanced Configuration •• 802.1X Indicates that the RADIUS server is used for 802.1X authentication. •• All Indicates that the RADIUS server is used for authenticating user name and passwords, and 802.1X port authentication. Use the Add to List button to add the RADIUS configuration to the RADIUS Table at the bottom of the screen. Security > TACACS+ The device provides Terminal Access Controller Access Control System (TACACS+) client support. TACACS+ provides centralized security for validation of users accessing the device. TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes. The TACACS+ protocol ensures network integrity through encrypted protocol exchanges between the device and TACACS+ server. Status Displays the connection status between the device and the TACACS+ server. The possible field values are: •• Connected There is currently a connection between the device and the TACACS+ server. •• Not Connected There is not currently a connection between the device and the TACACS+ server. Single Connection Maintains a single open connection between the device and the TACACS+ server when selected Use the Add to List button to add the TACACS+ configuration to the TACACS+ table at the bottom of the screen. Security > 802.1x Settings Port based authentication enables authenticating system users on a per-port basis via an external server. Only authenticated and approved system users can transmit and receive data. Ports are authenticated via the RADIUS server using the Extensible Authentication Protocol (EAP). Security > TACACS+ Host IP Address Displays the TACACS+ Server IP address. Priority Displays the order in which the TACACS+ servers are used. The default is 0. Source IP Address Displays the device source IP address used for the TACACS+ session between the device and the TACACS+ server. Key String Defines the authentication and encryption key for TACACS+ server. The key must match the encryption key used on the TACACS+ server. Authentication Port Displays the port number through which the TACACS+ session occurs. The default is port 49. Timeout for Reply Displays the amount of time that passes before the connection between the device and the TACACS+ server times out. The field range is 1-30 seconds. WebView Switches Security > 802.1x Settings Enable 802.1x Select the checkbox to enable 802.1x authentication. Port Indicates the port name. Status Port Control Specifies the port authorization state. The possible field values are as follows: •• Force-Unauthorized The controlled port state is set to Force-Unauthorized (discard traffic). •• Auto The controlled port state is set by the system. •• Force-Authorized The controlled port state is set to Force-Authorized (forward traffic). Enable Periodic Reauthentication Permits immediate port reauthentication. 37