Authentication Commands

 

 

 

4

-

Status

– Administrative state for port access control.

-

Operation Mode

– Dot1x port control operation mode (page 4-115).

-

Mode

– Dot1x port control mode (page 4-114).

-

Authorized

– Authorization status (yes or n/a - not authorized).

802.1X Port Details – Displays the port access control parameters for each interface, including the following items:

-

reauth-enabled

– Periodic re-authentication (page 4-116).

-

reauth-period

– Time after which a connected client must be

 

 

re-authenticated (page 4-117).

-

quiet-period

– Time a port waits after Max Request Count is

 

 

exceeded before attempting to acquire a new

 

 

client (page 4-116).

-

tx-period

– Time a port waits during authentication session

 

 

before re-transmitting EAP packet (page 4-117).

-

supplicant-timeout

– Supplicant timeout.

-

server-timeout

– Server timeout.

-

reauth-max

– Maximum number of reauthentication attempts.

-

max-req

– Maximum number of times a port will retransmit

 

 

an EAP request/identity packet to the client

 

 

before it times out the authentication session

 

 

(page 4-114).

-

Status

– Authorization status (authorized or not).

-

Operation Mode

– Shows if single or multiple hosts (clients) can

 

 

connect to an 802.1X-authorized port.

-

Max Count

– The maximum number of hosts allowed to

 

 

access this port (page 4-115).

-

Port-control

– Shows the dot1x mode on a port as auto,

 

 

force-authorized, or force-unauthorized

 

 

(page 4-114).

-

Supplicant

– MAC address of authorized client.

-

Current Identifier

– The integer (0-255) used by the Authenticator to

 

 

identify the current authentication session.

-

Intrusion action

– Shows whether the switch will block all non-EAP

 

 

traffic or assign traffic on the port to a guest

 

 

VLAN if authentication fails.

Authenticator State Machine

-

State

– Current state (including initialize, disconnected,

 

 

connecting, authenticating, authenticated, aborting,

 

 

held, force_authorized, force_unauthorized).

-

Reauth Count

– Number of times connecting state is re-entered.

Backend State Machine

-

State

– Current state (including request, response,

 

 

success, fail, timeout, idle, initialize).

-

Request Count

– Number of EAP Request packets sent to the

 

 

Supplicant without receiving a response.

4-119

Page 415
Image 415
Accton Technology ES3528M-SFP manual Authenticator State Machine, Backend State Machine