Configuring Easy Config Setup

Port Settings

Ports/Interfaces

Select an Ethernet switching interface, an IPv4 routing interface, or an IPv6 routing interface. All the ports associated with the device (except Layer 3 interfaces) are available in the list.

Description(optional)

Provide a description of the device configuration or port details of the device. You can use up to 256 characters.

Port Mode

Configure a switching interface port to be an access, trunk, or tagged-access port for EX Series switches. Campus Switching ELS and Data Center Switching ELS series devices supports access mode and trunk mode. For more information about port modes, see Creating and Managing Port Profiles.

Disable Port

Disables the port. You can still configure and deploy all the settings but these settings become active only when you enable the port by clearing this selection.

Member VLAN Settings

You can enable VLAN settings and display the configuration options by enabling Member VLAN Settings.

You can either select an existing VLAN profile or create a new VLAN profile that you want to assign to the port.

To select an existing profile:

1. Select the option Select VLAN Profile.

2. Select the option Select.

   The Choose VLAN profile window opens.

3. Select the VLAN profile name and click OK.

To create a new profile:

1. Select Configure VLAN Settings.

2. Click Create.

   The Create VLAN Profile window opens.

3. Enter the VLAN name.

4. Under VLAN ID, select Single and enter a VLAN ID from 1 to 4094 if you want to configure a single VLAN.

   or

   Under VLAN ID, select Range and enter a range of VLAN IDs that you want to assign to the VLAN profile.

   Tip:

   Single VLAN IDs can be configured for all products. VLAN lists or VLAN ID ranges are available for some products, depending on the technology used for implementation.

5. Click OK.

PoE Settings

You can enable PoE and display the configuration options by enabling PoE Settings.

Maximum Power(W)

Use the arrows to adjust the maximum PoE power in watts allocated to a PoE port. The powered device cannot draw more power than the wattage specified. If it does, PoE power to the port is shut down.

Priority

Select a power priority for the PoE port—either Low or High. If there is a shortage of PoE power on the switch, power to low priority ports is shut down before power to high priority ports. Within ports with the same assigned priority, power priority is determined by the port number—ports with a lower port number have a higher power priority.

Default: low priority

Disable PoE

Select to disable PoE on the interfaces that use this Port profile.

802.1x Settings (Authentication)

You can configure 802.1x and display the configuration options by enabling 802.1x Settings (Authentication).

Enable 802.1x

802.1x authentication is enabled by default for a switching profile. 802.1x authentication works by using an Authenticator Port Access Entity (the switch) to block all traffic to and from a supplicant (end device) at the port until the supplicant's credentials are presented and matched on the Authentication server (a RADIUS server). When authenticated, the switch stops blocking traffic and opens the port to the supplicant. Network access can be further defined using VLANs.

Enable MAC-RADIUS

Select to enable MAC-RADIUS based authentication for this profile. MAC RADIUS authentication enables LAN access to permitted MAC addresses. When a new MAC address appears on an interface, the switch consults the RADIUS server to check whether the MAC address is a permitted address. If the MAC address is configured on the RADIUS server, the device is allowed access to the LAN.

Supplicant Mode

Specify the mode authentication supplicants use, either Single, Multiple, or Single-Secure.

• Single—Allows only one host for authentication. This is the default mode.

• Single-Secure—Allows only one end device to connect to the port. No other end device is enabled to connect until the first logs out.

• Multiple—Allows multiple hosts for authentication. Each host is checked before being admitted to the network.

Guest VLAN

Click Select and then select the VLAN to which an interface is moved when no 802.1x supplicants are connected on the interface. The VLAN specified must already exist on the switch.

Reject VLAN

Click Select and then select the VLAN to which an interface is moved when the switch receives an Extensible Authentication Protocol over LAN (EAPoL) Access-Reject message during the authentication process between the switch and the RADIUS authentication server.

Server Fail Type

Specify the server fail fallback action the switch takes when all RADIUS authentication servers are unreachable; one of None, Deny, Permit, Use cache, or VLAN Name.

• None—No server failback action is used. This option is selected by default.

• Deny—Force fails supplicant authentication. No traffic will flow through the interface.

• Permit—Force succeeds the supplicant authentication. Traffic will flow through the interface as if it were successfully authenticated by the RADIUS server.

• Use cache—Force succeeds the supplicant authentication only if it was previously authenticated successfully. This action ensures that already authenticated supplicants are not affected.

• VLAN Name—Move supplicant on the interface to the VLAN specified by this name. This action is allowed only for the first supplicant connecting to an interface. If an authenticated supplicant is already connected, then the supplicant is not moved to the VLAN and is not authenticated. If you select this option, you must provide a Fail VLAN name.

Access Settings

You can configure authentication parameters and accounting parameters on the network and display the configuration options by enabling Access Settings.

Server Address

Enter the IP address of the RADIUS server.

Authentication Port

The default RADIUS authentication port is 1812. You can change the port number by using the up and down arrows.

Secret

Provide a password. If the password contains spaces, enclose it in quotation marks. The secret password used by the switch must match the one used by the server.

Retry Count

Specify the number of times that a device attempts to contact the LDAP authentication server. The default retry count is 3. You can change this value by using the up and down arrows to 1 through 100 times.

Timeout (seconds)

Specify the number of seconds the switch waits to receive a response from a RADIUS server. The default timeout is 5 seconds. You can change this value, using the up and down arrows, to 1 through 65535 seconds.