D-Link TM DES-6500 manual 802.1X Commands

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

24

802.1X COMMANDS

The xStack DES-6500 implement the server-side of the IEEE 802.1x Port-based and MAC-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.

Command	Parameters
enable 802.1x
disable 802.1x
create 802.1x user	<username 15>
show 802.1x user
delete 802.1x user
show 802.1x auth_state	ports [<portlist> all]
show 802.1x	ports [<portlist> all]
auth_configuration
config 802.1x auth_mode	[port_based mac_based]
config 802.1x capability	[ports <portlist> all] [authenticator none]
config 802.1x	[<portlist> all] [default {direction [both in] port_control
auth_parameter ports	[force_unauth auto force_auth] quiet_period <sec 0-
	65535> tx_period <sec 1-65535> supp_timeout <sec 1-
	65535> server_timeout <sec 1-65535> max_req <value 1-
	10> reauth_period <sec 1-65535> enable_reauth [enable
	disable]}]
config 802.1x	[local radius eap]
auth_protocol
config 802.1x init	{port_based ports [<portlist> all]} mac_based [ports]
	[<portlist> all] {mac_address <macaddr>}]
config 802.1x reauth	{port_based ports [<portlist> all]} [<portlist> all]
	{mac_address <macaddr>}]
config radius add	<server_index 1-3> <server_ip> key <passwd 32> [default
	{auth_port <udp_port_number 1-65535> acct_port
	<udp_port_number 1-65535>}]
config radius delete	<server_index 1-3>
config radius	<server_index 1-3> {ipaddress <server_ip> key <passwd
	32> auth_port <udp_port_number 1-65535> acct_port
	<udp_port_number 1-65535>]}
show radius
show acct_client
show auth_client
show auth_diagnostics	{ports [<portlist> all]}
show auth_session	{ports [<portlist> all]}

190