Chapter 43: 802.1X Port Authentication

The switch supports IEEE 802.1X (dot1x) port-based access control that prevents unauthorized access to the network by requiring users to first submit credentials for authentication. Client authentication is controlled centrally by a RADIUS server using EAP (Extensible Authentication Protocol).

Table 43-1 802.1X Port Authentication Commands

Command

Function

Mode

Page

 

 

 

 

dot1x system-auth-control

Enables dot1x globally on the switch.

GC

43-1

 

 

 

 

dot1x default

Resets all dot1x parameters to their default values

GC

43-2

 

 

 

 

dot1x max-req

Sets the maximum number of times that the switch

IC

43-2

 

retransmits an EAP request/identity packet to the client

 

 

 

before it times out the authentication session

 

 

dot1x port-control

Sets dot1x mode for a port interface

IC

43-2

 

 

 

 

dot1x operation-mode

Allows single or multiple hosts on an dot1x port

IC

43-3

 

 

 

 

dot1x re-authenticate

Forces re-authentication on specific ports

PE

43-4

 

 

 

 

dot1x re-authentication

Enables re-authentication for all ports

IC

43-4

 

 

 

 

dot1x timeout quiet-period

Sets the time that a switch port waits after the Max

IC

43-5

 

Request Count has been exceeded before attempting to

 

 

 

acquire a new client

 

 

dot1x timeout re-authperiod

Sets the time period after which a connected client must

IC

43-5

 

be re-authenticated

 

 

dot1x timeout tx-period

Sets the time period during an authentication session that

IC

43-6

 

the switch waits before re-transmitting an EAP packet

 

 

show dot1x

Shows all dot1x related information

PE

43-6

 

 

 

 

dot1x system-auth-control

This command enables IEEE 802.1X port authentication globally on the switch. Use the no form to restore the default.

Syntax

[no] dot1x system-auth-control

Default Setting

Disabled

Command Mode

Global Configuration

Example

Console(config)#dot1x system-auth-control

Console(config)#

43-1

Page 381
Image 381
Accton Technology ES4548D, ES4524D, 24/48-Port manual 802.1X Port Authentication, Dot1x system-auth-control