Command Line Interface
7-66
7
Command Mode
Global Configuration
Command Usage
• When 802.1X is disabled, the access point does not support 802.1X
authentication for any station. After successful 802.11 association, each
client is allowed to access the network.
• When 802.1X is supported, the access point supports 802.1X
authentication only for clients initiating the 802.1X authentication process
(i.e., the access point does NOT initiate 802.1X authentication). For stations
initiating 802.1X, only those stations successfully authenticated are allowed
to access the network. For those stations not initiating 802.1X, access to
the network is allowed after successful 802.11 association.
• When 802.1X is required, the access point enforces 802. 1X authentication
for all 802.11 associated stations. If 802.1X authentication is not initiated by
the station, the access point will initiate authentication. Only those stati ons
successfully authenticated with 802.1X are allowed to access the network.
• 802.1X does not apply to the 10/100Base-TX port.
Example
802.1x broadcast-key-refresh-rate
This command sets the interval at which the broadcast ke ys are refreshed for
stations using 802.1X dynamic keying.
Syntax
802.1x broadcast-key-refresh-rate <rate>
rate - The interval at which the access point rotates broadcast keys.
(Range: 0 - 1440 minutes)
Default Setting
0 (Disabled)
Command Mode
Global Configuration
Command Usage
• The access point uses Enterprise APOL (Extensible Authentication
Protocol Over LANs) packets to pass dynamic unicast session and
broadcast keys to wireless clients. The 802.1x
broadcast-key-refresh-rate command specifies the interval after which
the broadcast keys are changed. The 802.1x session-key-refresh-rate
Enterprise AP(config)#802.1x supported
Enterprise AP(config)#