The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
The 802.1X uses a protocol which is Extensible Authentication Protocol (EAP) encapsulation over Local Area Networks (EAPOL). The 802.1X authentication involves three parties which are a supplicant which is the user or client that wants to be authenticated , an authentication user, which is the actual server doing the authentication like RADIUS server and the authenticator is the device in between such as a wireless access point. This document explains the configuration of the time range on 802.1X ports on ESW2-350G series switches. Time range gives the time period during which the 802.1X is active on the 802.1X enabled ports.
The time range must be configured with an absolute start and end time. If this time range has an absolute time range and no recurring time range and it is configured to a 802.1X port then in this case the 802.1X port is active from the absolute time to the end time. If the time range has both the absolute and the recurring ranges then the 802.1X port can be activated only if the absolute start time and the recurring time range has been achieved. Using the Recurring Range window the recurring time range is added to the absolute time range. The time range can have one or more recurring ranges in that case the 802.1X port is active between the time period given in the recurring range which would be between the absolute start and end time of the time range. When the 802.1X port is outside the assigned time range then this port will become inactive.The 300 series switch can support 20 absolute time ranges.
NOTE: In order to ensure that the time range entries take effect at the desired time, the software clock should be set by the user or by the Simple Network Time Protocol (SNTP). Failure to set the software clock in this way can cause the time range not to get applied to the 802.1X port.
The configuration of time range on the 802.1X port has an advantage which is if the user wants to limit the access of the computers to the network only during the business hours after which these computers are locked and is also used to block the access to the rest of the network.
Step 1. Log in to the web configuration utility and choose Security > 802.1X > Time Range or Time Settings > Time Range. The Time Range page opens:
Note: For Recurring Range please follow the Recurring Range Configuration on ESW2-350G. To configure recurring range time range should be configured first.
Step 2. Click Add. The Add Time Range page opens:
Step 3. Enter the following parameters in the field shown below:
• Time Range Name — Enter the time range in this field.
• Absolute Starting Time — The Absolute Starting Time field has two options:
• Immediate — Check this field to show that the time range starts from the time when it is created.
• Date and Time — Check this field to choose the absolute start date and time from the drop down menu.
• Absolute Ending Time — The Absolute Ending Time field has two options:
• Infinite — Choose this field to show that the time range is infinite and it never ends.
• Date and Time — Check this field to choose the absolute end date and time from the drop down menu.
Step 4. Click Apply.