[802.1x Configuration Menu]

 

global- Global 802.1x configuration menu

port

- Port 802.1x

configuration menu

ena

- Enable 802.1x access control

dis

- Disable 802.1x access control

cur

- Show 802.1x

configuration

This feature allows you to configure the GbE2c as an IEEE 802.1x Authenticator, to provide port-based network access control. The following table describes the 802.1x Configuration Menu options.

Table 103 802.1x Configuration Menu options

Command

Description

 

 

global

Displays the global 802.1x Configuration Menu.

 

 

port <port number>

Displays the 802.1x Port Menu.

 

 

ena

Globally enables 802.1x.

 

 

dis

Globally disables 802.1x.

 

 

cur

Displays current 802.1x parameters.

 

 

802.1x Global configurationCommand: /cfg/l2/8021x/global[802.1x Global Configuration Menu]

mode

-

Setaccess control mode
qtperiod -

Set

EAP-Request/Identity quiet time interval

txperiod - Set EAP-Request/Identity retransmission timeout suptmout - Set EAP-Request retransmission timeout

svrtmout- Set server authentication request timeout
maxreq- Set max number of EAP-Request retransmissions
raperiod- Set reauthentication time interval
reauth- Set reauthentication status to on or off
default- Restore default 802.1x

configuration

cur

- Display current 802.1x

configuration

The global 802.1x menu allows you to configure parameters that affect all ports in the switch. The following table describes the 802.1x Global Configuration Menu options.

Table 104 802.1x Global Configuration Menu options

Command

Description

 

 

 

mode force-

Sets the type of access control for all ports:

unauthautoforce-auth

force-unauth- the port is unauthorized unconditionally.

 

auto - the port is unauthorized until it is successfully authorized by the

 

RADIUS server.

 

force-auth- the port is authorized unconditionally, allowing all traffic.

 

The default value is force-auth.

 

 

 

qtperiod <0-65535>

Sets the time, in seconds, the authenticator waits before transmitting an EAP-

 

Request/ Identity frame to the supplicant (client) after an authentication failure

 

in the previous round of authentication. The default value is 60 seconds.

 

 

 

txperiod <1-65535>

Sets the time, in seconds, the authenticator waits for an EAP-Response/Identity

 

frame from the supplicant (client) before retransmitting an EAP-Request/Identity

 

frame. The default value is 30 seconds.

 

 

 

suptmout <1-65535>

Sets the time, in seconds, the authenticator waits for an EAP-Response packet

 

from the supplicant (client) before retransmitting the EAP-Request packet to the

 

authentication server. The default value is 30 seconds.

 

 

 

svrtmout <1-65535>

Sets the time, in seconds, the authenticator waits for a response from the Radius

 

server before declaring an authentication timeout. The default value is 30

 

seconds.

 

The time interval between transmissions of the RADIUS Access-Request packet

 

containing the supplicant’s (client’s) EAP-Response packet is determined by the

 

current setting of /cfg/sys/radius/timeout (default is 3 seconds).

 

 

 

 

Configuration Menu 110