Configuring Port-Based Access Control (802.1x)

Configuring Switch Ports To Operate As Supplicants for 802.1x Connections to Other Switches

aaa port-access supplicant [ ethernet ] < port-list> (Syntax Continued) [ auth-timeout < 1 - 300 > ]

Sets the period of time the port waits to receive a challenge from the authenticator. If the request times out, the port sends another authentication request, up to the number of attempts specified by the max-startparameter. (Default: 30 seconds).

[ max-start < 1 .. 10 >]

Defines the maximum number of times the supplicant port requests authentication. See step 1 on page 6-34 for a description of how the port reacts to the authen­ ticator response. (Default: 3).

[ held-period < 0 .. 65535 > ]

Sets the time period the supplicant port waits after an active 802.1x session fails before trying to re- acquire the authenticator port. (Default: 60 seconds)

[ start-period < 1 .. 300 > ]

Sets the time period between Start packet retrans- mis­ sions. That is, after a supplicant sends a start packet, it waits duirng the start-periodfor a response. If no response comes during the start- period, the supplicant sends a new start packet. The max-start setting (above) specifies how many start attempts are allowed in the session. (Default: 30 seconds)

aaa port-access supplicant [ ethernet ] < port-list> [ initialize ]

On the specified ports, blocks inbound and outbound traffic and restarts the 802.1x authentication process. Affects only ports configured as 802.1x supplicants.

[ clear-statistics ]

Clears and restarts the 802.1x supplicant statistics counters.

6-36

Page 170
Image 170
HP 4100gl manual Max-start 1