Dot1x re-authenticate, Dot1x re-authentication | NETGEAR 7300S

User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software

Mode	Global Config

no dot1x port-control All

This command sets the authentication mode to be used on all ports to 'auto'.

Format	no dot1x port-control all
Mode	Global Config

dot1x re-authenticate

This command begins the re-authentication sequence on the specified port. This command is only valid if the control mode for the specified port is 'auto'. If the control mode is not 'auto' an error will be returned.

Format	dot1x re-authenticate <slot/port>
Mode	Privileged EXEC

dot1x re-authentication

This command enables re-authentication of the supplicant for the specified port.

Default	disabled
Format	dot1x re-authentication
Mode	Interface Config

no dot1x re-authentication

This command disables re-authentication of the supplicant for the specified port.

Format	no dot1x re-authentication
Mode	Interface Config

dot1x system-auth-control

This command is used to enable the dot1x authentication support on the switch. By default, the authentication support is disabled. While disabled, the dot1x configuration is retained and can be changed, but is not activated.

Defaultdisabled

Security Commands

9-9

202-10088-01, March 2005

Image 217

NETGEAR 7300S manual Dot1x re-authenticate, Dot1x re-authentication, Dot1x system-auth-control, No dot1x port-control All

Contents

202-10088-01, March Technical Support Canadian Department of Communications Compliance Statement 202-10088-01, March Contents Chapter Command Line Interface Structure 202-10088-01, March 202-10088-01, March 202-10088-01, March 202-10088-01, March Pre-login Banner System Log Syslog User Account Commands 202-10088-01, March 100 202-10088-01, March 202-10088-01, March Chapter Security Commands 202-10088-01, March 202-10088-01, March Chapter Routing Commands Xxii 202-10088-01, March Chapter Quality of Service QoS Commands 202-10088-01, March 202-10088-01, March Chapter Managing Switch Stacks Appendix a Is CLI Mapping Appendix B Cabling Guidelines Contents Xxx Contents How to Use This Document Why the Document was CreatedAudience Special Message Formats Typographical Conventions About This Guide About This Guide Scope Switch Management Overview Comparing Switch Management Methods Set Up Your Switch Using Direct Console Access Chapter Administration Console Interface Connection Description Connection Settings Administration Console Interface Chapter Web-Based Management Interface Web Based Management Overview How to Log In to the Managed Switch Login window opens System Information Web-Based Management Utility Features Interactive switch image Interactive Switch Image Main Menus Menus Secondary Menus SwitchManagement Routing System-Wide Popup MenusTraffic Management Smart Wizard Port-Specific Popup Menus Web-Based Management Interface Command CLI Command Format Values Parameters Macaddr Conventions Annotations Chapter Quick Start up Quick Starting the Switch Quick Start up Software Version Information System Info and System SetupQuick Start up Physical Port Data Quick Start up IP Address Quick Start up User Account Management Quick Start-up IP Address Using Switch as Layer-2 Device Quick Start-up IP Address Using Switch as Layer-3 Device Quick Start up Uploading from Switch to Out-of-Band PC Only Quick Start up Downloading from Tftp Server Quick Start up Factory Defaults Quick Start up Factory Defaults Quick Start up Chapter Mode-based CLI Enter the ip dhcp pool Correct Mode-based Topology Command prompt shown at this level is Mode-based Command Hierarchy Figuration mode to configure the QoS policy map Invalid input detected at ‘’ marker Flow of Operation Behavior of Command Help ? No Form of a CommandSupport for No Form Mode-based CLI System Information and Statistics Commands Chapter Switching Commands Show eventlog Show arp switchShow hardware Show interface Show interface ethernet Packets Received Packets Received Successfully Packets Received with MAC Errors Received Packets not forwarded Packets Transmitted Octets Packets Transmitted Successfully Transmit ErrorsTransmit Discards Protocol Statistics Dot1x Statistics Switching Commands Show mac-addr-table Show logging Show msglog Show running-config Show sysinfo System Management CommandsSnmp-server Transport input telnet TelnetNo transport input telnet Transport output telnet Session-timeoutSession-limit Bridge aging-time No session-timeoutSeconds No bridge aging-time Network javamode MtuNetwork mac-address No mtu Network parms Network mac-typeNo network mac-type Network protocol Telnetcon timeoutTelnetcon maxsessions No telnetcon maxsessions No telnetcon timeout Serial timeoutNo serial timeout Serial baudrate Serviceport protocol Serviceport ipSet prompt Show telnet Show network Show forwardingdb agetime Format Mode Java ModeShow telnetcon Show serial Show serviceport Show snmpcommunity Snmp Community CommandsClient IP Address Client IP Mask Show trapflags Show snmptrap No snmp-server community Snmp-server community Snmp-server community ipmask Snmp-server community ipaddrNo snmp-server community ipaddr No snmp-server community ipmask No snmp-server community mode Snmp-server community modeSnmp-server community ro Snmp-server community rw Snmp-server enable traps bcaststorm Snmp-server enable trapsSnmp-server enable traps linkmode No snmp-server enable traps Snmp-server enable traps stpmode Snmp-server enable traps multiusersNo snmp-server enable traps linkmode No snmp-server enable traps stpmode No snmptrap mode Snmptrap modeSnmptrap Snmptrap ipaddr Snmp trap link-status all Snmp trap link-statusNo snmp trap link-status No snmp trap link-status all System Configuration Commands Management Vlan CommandNetwork mgmtvlan Addport Deleteport Global Config Deleteport Interface ConfigAuto-negotiate all No auto-negotiate Macfilter adddest MacfilterNo macfilter Macfilter addsrc Macfilter adddest allNo macfilter adddest No macfilter adddest all Monitor session Macfilter addsrc allNo macfilter addsrc No macfilter addsrc all No monitor session mode Monitor session modeShutdown No monitor session Speed all Shutdown allNo shutdown 100f 10h 10f 100h Storm-control broadcast100f No storm-control broadcast Show mac-address-table multicast Storm-control flowcontrolNo storm-control flowcontrol Show mac-address-table staticfiltering Show mac-address-table static Show monitor Show mac-address-table statsShow port Show port protocol Show storm-control Virtual LAN Vlan CommandsVlan No vlan Vlan ingressfilter Vlan acceptframeNo vlan acceptframe No vlan ingressfilter Vlan name Vlan makestaticVlan participation No vlan name Vlan port acceptframe all Vlan participation allExclude Auto Vlan port pvid all Vlan port ingressfilter allNo vlan port acceptframe all No vlan port ingressfilter all Vlan protocol group Vlan port tagging allVlan protocol group add protocol No vlan port tagging all Protocol group Vlan protocol group removeNo vlan protocol group add protocol No protocol group Protocol vlan group all Protocol vlan groupNo protocol vlan group No protocol vlan group all Vlan tagging Vlan pvidShow vlan No vlan pvid Vlan Name ConfiguredVlan Type Current Show vlan port Show vlan briefPort Vlan ID Traceroute System Utility CommandsIngress Filtering Enable passwd Clear configClear counters Clear igmpsnooping Clear traplog Clear port-channelClear vlan Logout Reload PingCopy Formatreload Pre-login Banner Configuration Scripting CLI Command LoggingLogging cli-command No logging cli-command Format Configscript delete Configscript applyConfigscript list Configscript show System Log Syslog Configscript validate Logging buffered wrap Logging bufferedLogging console No logging buffered Logging host Logging historyNo logging console No logging history Logging port Logging host removeLogging syslog No logging port Client Local Port Show logging history Show logging buffered Admin StatusShow logging hosts Severity Level Filter Simple Network Time Protocol Sntp Sntp client modeSntp broadcast client poll-interval Host Status Sntp client port Sntp client modeSntp unicast client poll-interval No sntp client port No sntp unicast client poll-timeout Sntp unicast client poll-timeoutSntp unicast client poll-retry Sntp multicast client poll-interval Show sntp Sntp server Show sntp server Show sntp client Show loginsession User Account CommandsDisconnect Connection From Show usersIdle Time Session Time Users passwd Users nameNo users name No users passwd Users snmpv3 authentication Users snmpv3 accessmodeNo users snmpv3 accessmode No users snmpv3 authentication Users snmpv3 encryption Dhcp Server CommandsNo users snmpv3 encryption Client-name Client-identifierNo client-identifier No client-name No default-router Default-routerDns-server Hardware-address Ip dhcp excluded-address HostNo hardware-address No host Ip dhcp ping packets DefaultnoneIp dhcp pool No ip dhcp excluded-address Network LeaseNo ip dhcp pool No lease Bootfile Service dhcpNo service dhcp No bootfile No ip dhcp bootp automatic Ip dhcp bootp automaticDomain-name Ip dhcp conflict logging Netbios-node-type Netbios-name-serverNo netbios-name-server No ip dhcp conflict logging Next-server No netbios-node-typeOption No next-server Show ip dhcp binding Show ip dhcp global configurationNo option Show ip dhcp server statistics Show ip dhcp pool configuration Show ip dhcp conflict Clear ip dhcp binding Provisioning Ieee 802.1p CommandsClear ip dhcp server statistics Clear ip dhcp conflict Show classofservice dot1pmapping Classofservice dot1pmappingVlan port priority all Vlan priority Set garp timer join Garp CommandsNo set garp timer join Set garp timer leave Set garp timer join allNo set garp timer join all No set garp timer leave Set garp timer leaveall Set garp timer leave allNo set garp timer leave all No set garp timer leaveall No set garp timer leaveall all Set garp timer leaveall allGmrp Admin Mode Gvrp Admin Mode Set gvrp adminmode Garp Vlan Registration Protocol Gvrp CommandsNo set gvrp adminmode Set gvrp interfacemode Set gvrp interfacemode all Show gvrp configuration Set gmrp adminmode Garp Multicast Registration Protocol Gmrp CommandsPort Gmrp Mode No set gmrp adminmode Set gmrp interfacemode all Set gmrp interfacemodeNo set gmrp interfacemode No set gmrp interfacemode all Show mac-address-table gmrp Show gmrp configuration Set igmp Internet Group Management Protocol Igmp Commands No set igmp Set igmp groupmembership-intervalNo set igmp groupmembership-interval Set igmp maxresponse Set igmp interfacemode allNo set igmp interfacemode all No set igmp maxresponse Set igmp mcrtrexpiretime Format Mode Admin ModeShow igmpsnooping No set igmp mcrtrexpiretime Show mac-address-table igmpsnooping Igmp Snooping per Vlan No set igmp groupmembershipinterval Set igmp groupmembershipinterval Set igmp fast-leave Set igmp mcrtexpiretimeNo set igmp mcrtexpiretime No set igmp fast-leave Fast Leave Mode Link Aggregation LAG/Port-Channel 802.3AD CommandsPort-channel staticcapability Port lacpmode all Port lacpmodeNo port-channel staticcapability No port lacpmode No port-channel adminmode Port-channel adminmode allPort-channel Port-channel linktrap Show port-channel brief Port-channel name Show port-channel Spanning-tree max-hops Spanning Tree STP CommandsSpanning-tree No spanning-tree max-hops Spanning-tree configuration revision Spanning-tree configuration nameNo spanning-tree configuration name No spanning-tree Spanning-tree edgeport No spanning-tree configuration revisionSpanning-tree forceversion No spanning-tree edgeport Spanning-tree hello-time Spanning-tree forward-timeNo spanning-tree forceversion No spanning-tree forward-time Spanning-tree mst Spanning-tree max-ageNo spanning-tree max-age No spanning-tree mst Cost auto external-cost auto port-priorty Spanning-tree mst priority Spanning-tree mst instanceNo spanning-tree mst instance No spanning-tree mst priority No spanning-tree port mode Spanning-tree port modeSpanning-tree mst vlan No spanning-tree mst vlan Spanning-tree bpdumigrationcheck Spanning-tree port mode all Show spanning-tree Show spanning-tree interface Port mode Show spanning-tree mst port detailed Show spanning-tree mst detailed Port Forwarding State Port PriorityPort Role Port Path Cost Show spanning-tree mst summary Show spanning-tree mst port summaryCST Regional Root CST Port Cost Show spanning-tree vlan Show spanning-tree summary Switching Commands 133 Mode Designated Root Root Path Cost Topology ChangeRoot Port Identifier Root Port Max Age Bridge Forward Delay Root Port Bridge Forward Delay Derived valueCST Regional Root Regional Root Path Cost Bridge Identifier Bridge Max Age RST BPDUs Transmitted STP BPDUs TransmittedMstp BPDUs Transmitted Mstp BPDUs Received MST Instance ID Port Identifier Port Priority Configured value indicating if this port is an edge port Port-security Port SecurityNo port-security Port-security max-static Port-security max-dynamicNo port-security max-dynamic No port-security max-static No snmp-server enable traps violation Snmp-server enable traps violationPort-security mac-address Port-security mac-address move Show port-security dynamic Show port-securityShow port-security static Authentication login Port Based Network Access Control Ieee 802.1X CommandsShow port-security violation No authentication login Dot1x defaultloginClear dot1x statistics Clear radius statistics Dot1x initialize Dot1x loginDot1x max-req No dot1x max-req Dot1x port-control All Dot1x port-controlNo dot1x port-control Dot1x re-authentication Dot1x re-authenticateNo dot1x re-authentication Dot1x system-auth-control No dot1x system-auth-control Dot1x timeout Dot1x user No dot1x timeoutShow radius accounting No dot1x user Show authentication Show dot1x Show authentication usersMethod User Supplicant Timeout Control ModeServer Timeout Protocol Version Control Direction Users defaultlogin Show users authenticationUsers login Show dot1x users Radius accounting mode Remote Authentication Dial In User Service Radius CommandsNo radius accounting mode Radius server host No radius server host Radius server key Default10Radius server msgauth Radius server primary No radius server timeout Radius server timeoutShow radius No radius server retransmit Show radius statistics Access Accepts Secure Shell SSH CommandsAccess Rejects Access Challenges Ip ssh protocol Hypertext Transfer Protocol Http CommandsShow ip ssh Ip http secure-protocol Ip http secure-portIp http secure-server No ip http secure-port Ip http server Http ModeShow ip http No ip http server Security Commands Arp Address Resolution Protocol ARP CommandsNo arp Arp cachesize Ip proxy-arpNo ip proxy-arp No arp cachesize Arp purge Arp dynamicrenewArp resptime No arp dynamicrenew No arp timeout Arp timeoutArp retries Clear arp-cache Age Time seconds Show arpRetries Cache Size Show arp brief IP RoutingRouting Ip address Ip routingNo routing No ip routing Ip route Ip route defaultNo ip address No ip route Defaultenabled No ip route defaultIp route distance Ip forwarding Ip mtu Ip netdirbcastNo ip forwarding No ip netdirbcast Show ip interface Show ip brief Show ip route Show ip interface brief Show ip route entry Show ip route bestroutesProtocol Next Hop Intf Show ip stats Show ip route preferencesNext Hop Interface Preference Bootpdhcprelay cidoptmode Bootp/DHCP Relay CommandsNo bootpdhcprelay cidoptmode Encapsulation Bootpdhcprelay maxhopcount Bootpdhcprelay enableBootpdhcprelay minwaittime Show bootpdhcprelay Bootpdhcprelay serverip Ip irdp Router Discovery Protocol CommandsIp irdp address No ip irdp Ip irdp maxadvertinterval Ip irdp holdtimeNo ip irdp address No ip irdp holdtime Ip irdp preference Ip irdp minadvertintervalShow ip irdp No ip irdp minadvertinterval Vlan routing Virtual LAN Routing Commands Enable RIP Routing Information Protocol RIP CommandsShow ip vlan Logical Interface Ip rip Default-information originate RIPAuto-summary No default-information originate RIP Default-metric RIPNo default-metric RIP Distance rip No default-information originate Ip rip authenticationDistribute-list out No distribute-list out Ip rip receive version No ip rip authenticationIp rip send version No ip rip receive version Split-horizon HostroutesacceptNo ip rip send version No hostroutesaccept Show ip rip RedistributeFormat for other source protocol No redistribute Show ip rip interface brief RIP ModeSend Version Receive Version Show ip rip interface Mac access-list extended name Access Control List ACL Commands No mac access-list extended name Mac access-list extended rename name newnameDenypermit srcmac srcmacmask dstmac dstmacmask Mac access-group name inout sequence Show mac access-lists Show mac access-list nameNo mac access-group name inout Access-list Ip access-group all Ip access-groupShow ip access-lists Source IP Mask Differentiated Services DiffServ CommandsDestination IP Mask Diffserv Service Levels Class CommandsNo diffserv Traffic Classification No class-map Match ethertype Class-map renameMatch secondary-cos Match secondary-vlan Match class-map Match any Match destination-address mac Match cos Match dstl4port Match dstip Match ip precedence Match ip dscp Match protocol Match ip tos Match srcip Match source-address macMatch srcl4port Match vlan Policy Commands Drop Assign-queueMark secondary-cos Conform-color RedirectBandwidth kbps Policy Type Bandwidth percent IncompatibilitiesClass Expedite percent Expedite kbps Policy Type Mark ip-dscp Mark cos Mark ip-precedence Policy Type IncompatibilitiesPolice-simple Police-single-rate Police-two-rate Policy-map rename Policy-mapRandomdrop Shape peak Shape average Service-policy Service Commands No service-policy Show Commands Class Name Show class-mapClass Type Match Criteria Show diffserv Conform COS Show policy-mapAssign Queue Mark IP Dscp Policy NameMark IP Precedence Policing Style Bandwidth Exceed ActionShaping Average Class Members Show diffserv serviceDirection Operational Status DiffServ Mode Show diffserv service briefPolicy Details OperStatus 11-38 Quality of Service QoS Commands Sent Octets/Packets Show service-policyDir Offered Packets Classofservice dot1p-mapping Class of Service CoS CommandsClassofservice ip-dscp-mapping Classofservice trust Classofservice ip-precedence-mappingNo classofservice trust Cos-queue max-bandwidth Cos-queue min-bandwidth No cos-queue max-bandwidthCos-queue random-detect No cos-queue min-bandwidth Random-detect Cos-queue strictNo cos-queue strict No random-detect Random-detect queue-parms Random-detect exponential-weighting-constantTail-drop queue-parms No random-detect queue-parms Traffic-shape Show classofservice dot1p-mapping Show classofservice trust Show classofservice ip-precedence-mappingShow interfaces cos-queue Show interfaces random-detect Fig indication Show interfaces tail-drop-threshold Drop precedence level for this queue, from 1 to p. The spe 11-50 Quality of Service QoS Commands Understanding Switch Stacks Chapter Managing Switch Stacks Switch Stack Membership Managing Switch Stacks 12-3 Interconnect Ports 51 As shown Stack Member Numbers Stack Master Election and Re-Election Stack Member Priority Values Switch Stack Offline Configuration Managing Switch Stacks 12-7 Incompatible Software and Stack Member Image Upgrades Switch Stack Software Compatibility RecommendationsSwitch Stack Configuration Files Switch Stack Configuration Scenarios Switch Stack Management ConnectivityConnectivity to the Switch Stack Through Console Ports Connectivity to the Switch Stack Through Telnet Stacking Recommendations General Practices Initial installation and Power-up of a Stack Adding a Unit to an Operating Stack Removing a Unit from the StackReplacing a Stack Member with a New Unit Renumbering Stack Members Removing a Master Unit from an Operating Stack Moving a Master to a Different Unit in the StackMerging Two Operational Stacks Upgrading Firmware Preconfiguration Code Mismatch Migration of Configuration With a Firmware Upgrade Appendix a Is CLI Mapping Config acl rule action aclid Rulenum permit/deny Exec Is CLI Mapping Config diffserv policy police style Policy-Cla Police-simple Is CLI Mapping Show diffserv class summary Privileged Exec User Class-Ma Match not cos Config Class-Ma Match not ip precedence Config Routing Show arp switch Privileged Is CLI Mapping Is CLI Mapping Vlan Router No enable Is CLI Mapping Is CLI Mapping Config Router No auto-summary Router No split-horizon 7300S Series L3 Switch CLI Command Mode Syntax Config snmptrap ipaddr Global Config telnet maxsessions Privileged Remotecon maxsessions Is CLI Mapping Global No spanning-tree configuration name Config Config spanningtree bridge priority Removed 61440 Interface No spanning-tree mst mstid cost Config Config syslocation location Global Snmp-server location loc Transfer download path path Show loginsession Privileged Show vlan summary Privileged Show vlan brief Exec User Show mfdb gmrp Privileged Show mac-address-table gmrp Config lag create name Global Port-channel name Global Deleteport logical slot/port all Config Is CLI Mapping Config protocol vlan add groupid Privileged No set gvrp adminmode Is CLI Mapping Security Show users authentication Privileged Is CLI Mapping Security Show radius server summary Privileged Is CLI Mapping All detail slot/port statistics Is CLI Mapping Fast Ethernet Cable Guidelines Appendix B Cabling Guidelines Category 5 Cable Category 5 Cable Specifications Twisted Pair Cables Specifications Category 5 Cable Requirements 4illustrates crossover twisted pair cable Patch Panels and Cables Cabling Using 1000BASE-T Gigabit Ethernet over Category 5 CableLength Return Loss Near End Cross Talk Next RJ-45 Plug and RJ-45 ConnectorsPatch Cables PIN Normal Assignment on Uplink Assignment on Ports 1 to Conclusion Numeric Appendix C Glossary See Area Border Router on See Autonomous System Boundary Router on Packet sent to all devices on a network See Command Line Interface on See Differentiated Services on Computer, printer, or server that is connected to a network See Generic Attribute Registration Protocol on See Garp Multicast Registration Protocol on Internet Control Message Protocol See Local Area Network on Megabits per second See Multi-Protocol Label Switching on See Multiplexing on See Open Systems Interconnection on Set of rules for communication between devices on a network See Routing Information Protocol on See Resource Reservation Setup Protocol on See Simple Network Management Protocol on See TLS on See Virtual Local Area Network on Wins