Dot1x re-authenticate, Dot1x re-authentication | NETGEAR NETGEAR

User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software

Mode	Global Config

no dot1x port-control All

This command sets the authentication mode to be used on all ports to 'auto'.

Format	no dot1x port-control all
Mode	Global Config

dot1x re-authenticate

This command begins the re-authentication sequence on the specified port. This command is only valid if the control mode for the specified port is 'auto'. If the control mode is not 'auto' an error will be returned.

Format	dot1x re-authenticate <slot/port>
Mode	Privileged EXEC

dot1x re-authentication

This command enables re-authentication of the supplicant for the specified port.

Default	disabled
Format	dot1x re-authentication
Mode	Interface Config

no dot1x re-authentication

This command disables re-authentication of the supplicant for the specified port.

Format	no dot1x re-authentication
Mode	Interface Config

dot1x system-auth-control

This command is used to enable the dot1x authentication support on the switch. By default, the authentication support is disabled. While disabled, the dot1x configuration is retained and can be changed, but is not activated.

Defaultdisabled

Security Commands

9-9

202-10088-01, March 2005

Image 215

NETGEAR NETGEAR Dot1x re-authenticate, Dot1x re-authentication, Dot1x system-auth-control, No dot1x port-control All

Contents

202-10088-01, March Technical Support Canadian Department of Communications Compliance Statement 202-10088-01, March Contents Chapter Command Line Interface Structure 202-10088-01, March 202-10088-01, March 202-10088-01, March 202-10088-01, March Pre-login Banner System Log Syslog User Account Commands 202-10088-01, March 100 202-10088-01, March 202-10088-01, March Chapter Security Commands 202-10088-01, March 202-10088-01, March Chapter Routing Commands Xxii 202-10088-01, March Chapter Quality of Service QoS Commands 202-10088-01, March 202-10088-01, March Chapter Managing Switch Stacks Appendix a Is CLI Mapping Appendix B Cabling Guidelines Contents Xxx Contents Audience Why the Document was CreatedHow to Use This Document Special Message Formats Typographical Conventions About This Guide About This Guide Scope Switch Management Overview Comparing Switch Management Methods Set Up Your Switch Using Direct Console Access Chapter Administration Console Interface Connection Description Connection Settings Administration Console Interface Chapter Web-Based Management Interface Web Based Management Overview How to Log In to the Managed Switch Login window opens System Information Web-Based Management Utility Features Interactive switch image Interactive Switch Image Main Menus Menus Management SwitchSecondary Menus Smart Wizard System-Wide Popup MenusRouting Traffic Management Port-Specific Popup Menus Web-Based Management Interface Command CLI Command Format Values Parameters Macaddr Conventions Annotations Chapter Quick Start up Quick Starting the Switch Quick Start up Physical Port Data System Info and System SetupQuick Start up Software Version Information Quick Start up IP Address Quick Start up User Account Management Quick Start up IP Address Xmodem Quick Start up Uploading from Switch to Out-of-Band PC Only Quick Start up Downloading from Tftp Server Quick Start up Factory Defaults Chapter Mode-based CLI Enter the ip dhcp pool Correct Mode-based Topology Command prompt shown at this level is Mode-based Command Hierarchy Figuration mode to configure the QoS policy map Invalid input detected at ‘’ marker Flow of Operation Support for No Form No Form of a CommandBehavior of Command Help ? Mode-based CLI System Information and Statistics Commands Chapter Switching Commands Show hardware Show arp switchShow eventlog Show interface Show interface ethernet Packets Received Packets Received Successfully Packets Received with MAC Errors Received Packets not forwarded Packets Transmitted Octets Transmit Discards Transmit ErrorsPackets Transmitted Successfully Protocol Statistics Dot1x Statistics Switching Commands Show mac-addr-table Show logging Show msglog Show running-config Snmp-server System Management CommandsShow sysinfo No transport input telnet TelnetTransport input telnet Session-limit Session-timeoutTransport output telnet No bridge aging-time No session-timeoutBridge aging-time Seconds No mtu MtuNetwork javamode Network mac-address No network mac-type Network mac-typeNetwork parms No telnetcon maxsessions Telnetcon timeoutNetwork protocol Telnetcon maxsessions Serial baudrate Serial timeoutNo telnetcon timeout No serial timeout Show telnet Serviceport ipServiceport protocol Set prompt Show network Show forwardingdb agetime Show telnetcon Java ModeFormat Mode Show serial Show serviceport Client IP Mask Snmp Community CommandsShow snmpcommunity Client IP Address Show trapflags Show snmptrap No snmp-server community Snmp-server community No snmp-server community ipmask Snmp-server community ipaddrSnmp-server community ipmask No snmp-server community ipaddr Snmp-server community rw Snmp-server community modeNo snmp-server community mode Snmp-server community ro No snmp-server enable traps Snmp-server enable trapsSnmp-server enable traps bcaststorm Snmp-server enable traps linkmode No snmp-server enable traps stpmode Snmp-server enable traps multiusersSnmp-server enable traps stpmode No snmp-server enable traps linkmode Snmptrap ipaddr Snmptrap modeNo snmptrap mode Snmptrap No snmp trap link-status all Snmp trap link-statusSnmp trap link-status all No snmp trap link-status Addport Management Vlan CommandSystem Configuration Commands Network mgmtvlan No auto-negotiate Deleteport Interface ConfigDeleteport Global Config Auto-negotiate all No macfilter MacfilterMacfilter adddest No macfilter adddest all Macfilter adddest allMacfilter addsrc No macfilter adddest No macfilter addsrc all Macfilter addsrc allMonitor session No macfilter addsrc No monitor session Monitor session modeNo monitor session mode Shutdown 100f 10h 10f Shutdown allSpeed all No shutdown No storm-control broadcast Storm-control broadcast100h 100f No storm-control flowcontrol Storm-control flowcontrolShow mac-address-table multicast Show mac-address-table staticfiltering Show mac-address-table static Show port Show mac-address-table statsShow monitor Show port protocol No vlan Virtual LAN Vlan CommandsShow storm-control Vlan No vlan ingressfilter Vlan acceptframeVlan ingressfilter No vlan acceptframe No vlan name Vlan makestaticVlan name Vlan participation Auto Vlan participation allVlan port acceptframe all Exclude No vlan port ingressfilter all Vlan port ingressfilter allVlan port pvid all No vlan port acceptframe all No vlan port tagging all Vlan port tagging allVlan protocol group Vlan protocol group add protocol No protocol group Vlan protocol group removeProtocol group No vlan protocol group add protocol No protocol vlan group all Protocol vlan groupProtocol vlan group all No protocol vlan group No vlan pvid Vlan pvidVlan tagging Show vlan Current ConfiguredVlan Name Vlan Type Port Vlan ID Show vlan briefShow vlan port Ingress Filtering System Utility CommandsTraceroute Clear igmpsnooping Clear configEnable passwd Clear counters Logout Clear port-channelClear traplog Clear vlan Formatreload PingReload Copy Pre-login Banner No logging cli-command Format CLI Command LoggingConfiguration Scripting Logging cli-command Configscript show Configscript applyConfigscript delete Configscript list System Log Syslog Configscript validate No logging buffered Logging bufferedLogging buffered wrap Logging console No logging history Logging historyLogging host No logging console No logging port Logging host removeLogging port Logging syslog Client Local Port Show logging history Severity Level Filter Admin StatusShow logging buffered Show logging hosts Host Status Sntp client modeSimple Network Time Protocol Sntp Sntp broadcast client poll-interval No sntp client port Sntp client modeSntp client port Sntp unicast client poll-interval Sntp multicast client poll-interval Sntp unicast client poll-timeoutNo sntp unicast client poll-timeout Sntp unicast client poll-retry Show sntp Sntp server Show sntp server Show sntp client Disconnect User Account CommandsShow loginsession Session Time Show usersConnection From Idle Time No users passwd Users nameUsers passwd No users name No users snmpv3 authentication Users snmpv3 accessmodeUsers snmpv3 authentication No users snmpv3 accessmode No users snmpv3 encryption Dhcp Server CommandsUsers snmpv3 encryption No client-name Client-identifierClient-name No client-identifier Hardware-address Default-routerNo default-router Dns-server No host HostIp dhcp excluded-address No hardware-address No ip dhcp excluded-address DefaultnoneIp dhcp ping packets Ip dhcp pool No lease LeaseNetwork No ip dhcp pool No bootfile Service dhcpBootfile No service dhcp Ip dhcp conflict logging Ip dhcp bootp automaticNo ip dhcp bootp automatic Domain-name No ip dhcp conflict logging Netbios-name-serverNetbios-node-type No netbios-name-server No next-server No netbios-node-typeNext-server Option No option Show ip dhcp global configurationShow ip dhcp binding Show ip dhcp server statistics Show ip dhcp pool configuration Show ip dhcp conflict Clear ip dhcp conflict Provisioning Ieee 802.1p CommandsClear ip dhcp binding Clear ip dhcp server statistics Vlan priority Classofservice dot1pmappingShow classofservice dot1pmapping Vlan port priority all No set garp timer join Garp CommandsSet garp timer join No set garp timer leave Set garp timer join allSet garp timer leave No set garp timer join all No set garp timer leaveall Set garp timer leave allSet garp timer leaveall No set garp timer leave all Gvrp Admin Mode Set garp timer leaveall allNo set garp timer leaveall all Gmrp Admin Mode Set gvrp interfacemode Garp Vlan Registration Protocol Gvrp CommandsSet gvrp adminmode No set gvrp adminmode Set gvrp interfacemode all Show gvrp configuration No set gmrp adminmode Garp Multicast Registration Protocol Gmrp CommandsSet gmrp adminmode Port Gmrp Mode No set gmrp interfacemode all Set gmrp interfacemodeSet gmrp interfacemode all No set gmrp interfacemode Show mac-address-table gmrp Show gmrp configuration Set igmp Internet Group Management Protocol Igmp Commands No set igmp groupmembership-interval Set igmp groupmembership-intervalNo set igmp No set igmp maxresponse Set igmp interfacemode allSet igmp maxresponse No set igmp interfacemode all No set igmp mcrtrexpiretime Format Mode Admin ModeSet igmp mcrtrexpiretime Show igmpsnooping Show mac-address-table igmpsnooping Igmp Snooping per Vlan No set igmp groupmembershipinterval Set igmp groupmembershipinterval No set igmp mcrtexpiretime Set igmp mcrtexpiretimeSet igmp fast-leave No set igmp fast-leave Port-channel staticcapability Link Aggregation LAG/Port-Channel 802.3AD CommandsFast Leave Mode No port lacpmode Port lacpmodePort lacpmode all No port-channel staticcapability Port-channel linktrap Port-channel adminmode allNo port-channel adminmode Port-channel Show port-channel brief Port-channel name Show port-channel No spanning-tree max-hops Spanning Tree STP CommandsSpanning-tree max-hops Spanning-tree No spanning-tree Spanning-tree configuration nameSpanning-tree configuration revision No spanning-tree configuration name No spanning-tree edgeport No spanning-tree configuration revisionSpanning-tree edgeport Spanning-tree forceversion No spanning-tree forward-time Spanning-tree forward-timeSpanning-tree hello-time No spanning-tree forceversion No spanning-tree max-age Spanning-tree max-ageSpanning-tree mst No spanning-tree mst Cost auto external-cost auto port-priorty No spanning-tree mst priority Spanning-tree mst instanceSpanning-tree mst priority No spanning-tree mst instance No spanning-tree mst vlan Spanning-tree port modeNo spanning-tree port mode Spanning-tree mst vlan Spanning-tree bpdumigrationcheck Spanning-tree port mode all Show spanning-tree Show spanning-tree interface Port mode Show spanning-tree mst port detailed Show spanning-tree mst detailed Port Path Cost Port PriorityPort Forwarding State Port Role CST Port Cost Show spanning-tree mst port summaryShow spanning-tree mst summary CST Regional Root Show spanning-tree vlan Show spanning-tree summary Switching Commands 133 Mode Root Port Identifier Root Port Max Age Topology ChangeDesignated Root Root Path Cost Bridge Identifier Bridge Max Age Root Port Bridge Forward Delay Derived valueBridge Forward Delay CST Regional Root Regional Root Path Cost MST Instance ID Port Identifier Port Priority STP BPDUs TransmittedRST BPDUs Transmitted Mstp BPDUs Transmitted Mstp BPDUs Received Configured value indicating if this port is an edge port No port-security Port SecurityPort-security No port-security max-static Port-security max-dynamicPort-security max-static No port-security max-dynamic Port-security mac-address move Snmp-server enable traps violationNo snmp-server enable traps violation Port-security mac-address Show port-security static Show port-securityShow port-security dynamic Show port-security violation Port Based Network Access Control Ieee 802.1X CommandsAuthentication login Clear radius statistics Dot1x defaultloginNo authentication login Clear dot1x statistics No dot1x max-req Dot1x loginDot1x initialize Dot1x max-req No dot1x port-control Dot1x port-controlDot1x port-control All Dot1x system-auth-control Dot1x re-authenticateDot1x re-authentication No dot1x re-authentication No dot1x system-auth-control Dot1x timeout No dot1x user No dot1x timeoutDot1x user Show radius accounting Show authentication User Show authentication usersShow dot1x Method Protocol Version Control ModeSupplicant Timeout Server Timeout Control Direction Show dot1x users Show users authenticationUsers defaultlogin Users login Radius server host Remote Authentication Dial In User Service Radius CommandsRadius accounting mode No radius accounting mode No radius server host Radius server primary Default10Radius server key Radius server msgauth No radius server retransmit Radius server timeoutNo radius server timeout Show radius Show radius statistics Access Challenges Secure Shell SSH CommandsAccess Accepts Access Rejects Show ip ssh Hypertext Transfer Protocol Http CommandsIp ssh protocol No ip http secure-port Ip http secure-portIp http secure-protocol Ip http secure-server No ip http server Http ModeIp http server Show ip http Security Commands No arp Address Resolution Protocol ARP CommandsArp No arp cachesize Ip proxy-arpArp cachesize No ip proxy-arp No arp dynamicrenew Arp dynamicrenewArp purge Arp resptime Clear arp-cache Arp timeoutNo arp timeout Arp retries Cache Size Show arpAge Time seconds Retries Routing IP RoutingShow arp brief No ip routing Ip routingIp address No routing No ip route Ip route defaultIp route No ip address Ip forwarding No ip route defaultDefaultenabled Ip route distance No ip netdirbcast Ip netdirbcastIp mtu No ip forwarding Show ip interface Show ip brief Show ip route Show ip interface brief Next Hop Intf Show ip route bestroutesShow ip route entry Protocol Preference Show ip route preferencesShow ip stats Next Hop Interface Encapsulation Bootp/DHCP Relay CommandsBootpdhcprelay cidoptmode No bootpdhcprelay cidoptmode Bootpdhcprelay minwaittime Bootpdhcprelay enableBootpdhcprelay maxhopcount Show bootpdhcprelay Bootpdhcprelay serverip No ip irdp Router Discovery Protocol CommandsIp irdp Ip irdp address No ip irdp holdtime Ip irdp holdtimeIp irdp maxadvertinterval No ip irdp address No ip irdp minadvertinterval Ip irdp minadvertintervalIp irdp preference Show ip irdp Vlan routing Virtual LAN Routing Commands Logical Interface Routing Information Protocol RIP CommandsEnable RIP Show ip vlan Auto-summary Default-information originate RIPIp rip Distance rip Default-metric RIPNo default-information originate RIP No default-metric RIP No distribute-list out Ip rip authenticationNo default-information originate Distribute-list out No ip rip receive version No ip rip authenticationIp rip receive version Ip rip send version No hostroutesaccept HostroutesacceptSplit-horizon No ip rip send version No redistribute RedistributeShow ip rip Format for other source protocol Receive Version RIP ModeShow ip rip interface brief Send Version Show ip rip interface Mac access-list extended name Access Control List ACL Commands Denypermit srcmac srcmacmask dstmac dstmacmask Mac access-list extended rename name newnameNo mac access-list extended name Mac access-group name inout sequence No mac access-group name inout Show mac access-list nameShow mac access-lists Access-list Show ip access-lists Ip access-groupIp access-group all Destination IP Mask Differentiated Services DiffServ CommandsSource IP Mask Diffserv Traffic Classification Class CommandsService Levels No diffserv No class-map Match secondary-vlan Class-map renameMatch ethertype Match secondary-cos Match class-map Match any Match destination-address mac Match cos Match dstl4port Match dstip Match ip precedence Match ip dscp Match protocol Match ip tos Match srcl4port Match source-address macMatch srcip Match vlan Policy Commands Mark secondary-cos Assign-queueDrop Policy Type RedirectConform-color Bandwidth kbps Class IncompatibilitiesBandwidth percent Expedite percent Expedite kbps Policy Type Mark ip-dscp Mark cos Police-simple Policy Type IncompatibilitiesMark ip-precedence Police-single-rate Police-two-rate Randomdrop Policy-mapPolicy-map rename Shape peak Shape average Service-policy Service Commands No service-policy Show Commands Match Criteria Show class-mapClass Name Class Type Show diffserv Assign Queue Show policy-mapConform COS Policing Style Policy NameMark IP Dscp Mark IP Precedence Shaping Average Exceed ActionBandwidth Operational Status Show diffserv serviceClass Members Direction OperStatus Show diffserv service briefDiffServ Mode Policy Details 11-38 Quality of Service QoS Commands Offered Packets Show service-policySent Octets/Packets Dir Classofservice ip-dscp-mapping Class of Service CoS CommandsClassofservice dot1p-mapping Cos-queue max-bandwidth Classofservice ip-precedence-mappingClassofservice trust No classofservice trust No cos-queue min-bandwidth No cos-queue max-bandwidthCos-queue min-bandwidth Cos-queue random-detect No random-detect Cos-queue strictRandom-detect No cos-queue strict No random-detect queue-parms Random-detect exponential-weighting-constantRandom-detect queue-parms Tail-drop queue-parms Traffic-shape Show classofservice dot1p-mapping Show interfaces cos-queue Show classofservice ip-precedence-mappingShow classofservice trust Show interfaces random-detect Fig indication Show interfaces tail-drop-threshold Drop precedence level for this queue, from 1 to p. The spe 11-50 Quality of Service QoS Commands Understanding Switch Stacks Chapter Managing Switch Stacks Switch Stack Membership Managing Switch Stacks 12-3 Interconnect Ports 51 As shown Stack Member Numbers Stack Master Election and Re-Election Stack Member Priority Values Switch Stack Offline Configuration Managing Switch Stacks 12-7 Switch Stack Configuration Files Switch Stack Software Compatibility RecommendationsIncompatible Software and Stack Member Image Upgrades Connectivity to the Switch Stack Through Telnet Switch Stack Management ConnectivitySwitch Stack Configuration Scenarios Connectivity to the Switch Stack Through Console Ports Stacking Recommendations General Practices Initial installation and Power-up of a Stack Replacing a Stack Member with a New Unit Removing a Unit from the StackAdding a Unit to an Operating Stack Renumbering Stack Members Merging Two Operational Stacks Moving a Master to a Different Unit in the StackRemoving a Master Unit from an Operating Stack Upgrading Firmware Preconfiguration Code Mismatch Migration of Configuration With a Firmware Upgrade Appendix a Is CLI Mapping Config acl rule action aclid Rulenum permit/deny Exec Is CLI Mapping Config diffserv policy police style Policy-Cla Police-simple Is CLI Mapping Show diffserv class summary Privileged Exec User Class-Ma Match not cos Config Class-Ma Match not ip precedence Config Routing Show arp switch Privileged Is CLI Mapping Is CLI Mapping Vlan Router No enable Is CLI Mapping Is CLI Mapping Config Router No auto-summary Router No split-horizon 7300S Series L3 Switch CLI Command Mode Syntax Config snmptrap ipaddr Global Config telnet maxsessions Privileged Remotecon maxsessions Is CLI Mapping Global No spanning-tree configuration name Config Config spanningtree bridge priority Removed 61440 Interface No spanning-tree mst mstid cost Config Config syslocation location Global Snmp-server location loc Transfer download path path Show loginsession Privileged Show vlan summary Privileged Show vlan brief Exec User Show mfdb gmrp Privileged Show mac-address-table gmrp Config lag create name Global Port-channel name Global Deleteport logical slot/port all Config Is CLI Mapping Config protocol vlan add groupid Privileged No set gvrp adminmode Is CLI Mapping Security Show users authentication Privileged Is CLI Mapping Security Show radius server summary Privileged Is CLI Mapping All detail slot/port statistics Is CLI Mapping Fast Ethernet Cable Guidelines Appendix B Cabling Guidelines Category 5 Cable Category 5 Cable Specifications Twisted Pair Cables Specifications Category 5 Cable Requirements 4illustrates crossover twisted pair cable Patch Panels and Cables Return Loss Using 1000BASE-T Gigabit Ethernet over Category 5 CableCabling Length Patch Cables RJ-45 Plug and RJ-45 ConnectorsNear End Cross Talk Next PIN Normal Assignment on Uplink Assignment on Ports 1 to Conclusion Numeric Appendix C Glossary See Area Border Router on See Autonomous System Boundary Router on Packet sent to all devices on a network See Command Line Interface on See Differentiated Services on Computer, printer, or server that is connected to a network See Generic Attribute Registration Protocol on See Garp Multicast Registration Protocol on Internet Control Message Protocol See Local Area Network on Megabits per second See Multi-Protocol Label Switching on See Multiplexing on See Open Systems Interconnection on Set of rules for communication between devices on a network See Routing Information Protocol on See Resource Reservation Setup Protocol on See Simple Network Management Protocol on See TLS on See Virtual Local Area Network on Wins