set dot1x auth-config
15-14 Security Configuration
set dot1x auth-config
Usethiscommandtoconfigure802.1Xauthentication.
Syntax
set dot1x auth-config {[authcontrolled-portcontrol {auto | forced-auth |
forced-unauth}] [maxreq value] [quietperiod value] [reauthenabled {false | true}]
[reauthperiod value] [servertimeout timeout] [supptimeout timeout] [txperiod
value]} [port-string]
Parameters
Defaults
Ifportstringisnotspecified,authenticationparameterswillbesetonallports.
Mode
Switchcommand,readwrite.
authcontrolled
portcontrol
auto|forcedauth|
forcedunauth
Specifiesthe802.1Xportcontrolmode.
autoSetportcontrolmodetoautocontrolledportcontrol.This
isthedefaultvalue.
forcedauthSetportcontrolmodetoForcedAuthorized
controlledportcontrol.
forcedunauthSetportcontrolmodetoForcedUnauthorized
controlledportcontrol.
maxreqvalue Specifiesthemaximumnumberofauthenticationrequestsallowed
bythebackendauthenticationstatemachine.Vali dvalu esare110.
Defaultvalueis2.
quietperiodvalue Specifiesthetime(inseconds)followingafailedauthentication
beforeanotherattemptcanbemadebytheauthenticatorPAEstate
machine.Vali dvalue sare065535.Defaultvalueis60seconds.
reauthenabledfalse|
true
Enables(true)ordisables(false)reauthenticationcontrolofthe
reauthenticationtimerstatemachine.Defaultvalueisfalse.
reauthperiodvalue Specifiesthetimelapse(inseconds)betweenattemptsbythe
reauthenticationtimerstatemachinetoreauthenticateaport.Vali d
valuesare065535.Defaultvalu eis3600seconds.
servertimeouttimeout Specifiesatimeoutperiod(inseconds)fortheauthenticationserver,
usedbythebackendauthenticationstatemachine.Vali dvaluesare1
300.Defaultvalueis30seconds.
supptimeouttimeout Specifiesatimeoutperiod(inseconds)fortheauthentication
supplicantusedbythebackendauthenticationstatemachine.Valid
valuesare1300.Defaultvalu eis30seconds.
txperiodvalue Specifiestheperiod(inseconds)whichpassesbetweenauthenticator
PAEstatemachineEAPtransmissions.Val id valuesare065535.
Defaultvalueis30seconds.
portstring (Optional)Limitstheconfigurationofdesiredsettingstospecified
port(s).Foradetaileddescriptionofpossibleportstringvalues, refer
toPortStringSyntaxUsedintheCLIonpage 41.