HP 445942-001 802.1x Global configuration

Configuration Commands

802.1x Global configuration

The global 802.1x commands allow you to configure parameters that affect all ports in the switch (except management port 17). The following table describes the 802.1x Global Configuration commands.

Table 102 802.1x Global Configuration commands

Command	Description
dot1x mode {[force-unauthorized	Sets the type of access control for all ports:
autoforce-authorized]}	• force-unauth—the port is unauthorized unconditionally.
	• auto—the port is unauthorized until it is successfully authorized
	by the RADIUS server.
	• force-auth—the port is authorized unconditionally, allowing
	all traffic.
	The default value is force-auth.
	Command mode: Global configuration
dot1x quiet-time {<0-65535>}	Sets the time, in seconds, the authenticator waits before transmitting
	an EAP-Request/ Identity frame to the supplicant (client) after an
	authentication failure in the previous round of authentication. The
	default value is 60 seconds.
	Command mode: Global configuration
dot1x transmit-interval	Sets the time, in seconds, the authenticator waits for an EAP-
{<1-65535>}	Response/Identity frame from the supplicant (client) before
	retransmitting an EAP-Request/Identity frame. The default value is
	30 seconds.
	Command mode: Global configuration
dot1x supplicant-timeout	Sets the time, in seconds, the authenticator waits for an EAP-
{<1-65535>}	Response packet from the supplicant (client) before retransmitting
	the EAP-Request packet from the authentication server. The default
	value is 30 seconds.
dot1x server-timeout {<1-65535>}	Sets the time, in seconds, the authenticator waits for a response
	from the Radius server before declaring an authentication timeout.
	The default value is 30 seconds.
	Command mode: Global configuration
dot1x max-request {<1-10>}	Sets the maximum number of times the authenticator retransmits an
	EAP-Request packet to the supplicant (client). The default value is 2.
	Command mode: Global configuration
dot1x re-authentication-interval	Sets the time, in seconds, the authenticator waits before re-
{<1-604800>}	authenticating a supplicant (client) when periodic re-authentication
	is enabled. The default value is 3600 seconds.
	Command mode: Global configuration
[no] dot1x re-authenticate	Sets the re-authentication status to on or off. The default value is
	off.
	Command mode: Global configuration
default dot1x	Resets the global 802.1x parameters to their default values.
	Command mode: Global configuration

127