Authentication Commands 4

802.1x Port Authentication

The switch supports IEEE 802.1x (dot1x) port-based access control that prevents unauthorized access to the network by requiring users to first submit credentials for authentication. Client authentication is controlled centrally by a RADIUS server using EAP (Extensible Authentication Protocol).

Table 4-31. 802.1x Port Authentication

Command

Function

Mode

Page

dot1x system-auth-control

Enables dot1x globally on the switch.

GC

4-77

 

 

 

 

dot1x default

Resets all dot1x parameters to their default values

GC

4-78

 

 

 

 

dot1x max-req

Sets the maximum number of times that the switch

IC

4-78

 

retransmits an EAP request/identity packet to the client

 

 

 

before it times out the authentication session

 

 

dot1x port-control

Sets dot1x mode for a port interface

IC

4-79

 

 

 

 

dot1x operation-mode

Allows single or multiple hosts on an dot1x port

IC

4-79

 

 

 

 

dot1x re-authenticate

Forces re-authentication on specific ports

PE

4-80

 

 

 

 

dot1x re-authentication

Enables re-authentication for all ports

IC

4-80

 

 

 

 

dot1x timeout quiet-period

Sets the time that a switch port waits after the Max

IC

4-81

 

Request Count has been exceeded before attempting to

 

 

 

acquire a new client

 

 

dot1x timeout re-authperiod

Sets the time period after which a connected client must

IC

4-81

 

be re-authenticated

 

 

dot1x timeout tx-period

Sets the time period during an authentication session that

IC

4-82

 

the switch waits before re-transmitting an EAP packet

 

 

show dot1x

Shows all dot1x related information

PE

4-82

 

 

 

 

dot1x system-auth-control

This command enables 802.1x port authentication globally on the switch. Use the no form to restore the default.

Syntax

[no] system-auth-control

Default Setting

Disabled

Command Mode

Global Configuration

Example

Console(config)#dot1x system-auth-control

Console(config)#

4-77

Page 253
Image 253
SMC Networks 16 10BASE-T, 100BASE-TX manual 802.1x Port Authentication, 31 .1x Port Authentication Command Function Mode