COMMAND LINE INTERFACE

802.1X Port Authentication

The switch supports IEEE 802.1X (dot1x) port-based access control that prevents unauthorized access to the network by requiring users to first submit credentials for authentication. Client authentication is controlled centrally by a RADIUS server using EAP (Extensible Authentication Protocol).

Table 4-32 802.1X Port Authentication

Command

Function

Mode

Page

dot1x

Enables dot1x globally on the switch.

GC

4-107

system-auth-control

 

 

 

 

 

 

 

dot1x default

Resets all dot1x parameters to their

GC

4-107

 

default values

 

 

 

 

 

 

dot1x max-req

Sets the maximum number of times that

IC

4-107

 

the switch retransmits an EAP request/

 

 

 

identity packet to the client before it

 

 

 

times out the authentication session

 

 

 

 

 

 

dot1x port-control

Sets dot1x mode for a port interface

IC

4-108

 

 

 

 

dot1x

Allows single or multiple hosts on an

IC

4-109

operation-mode

dot1x port

 

 

 

 

 

 

dot1x re-authenticate

Forces re-authentication on specific ports

PE

4-110

 

 

 

 

dot1x

Enables re-authentication for all ports

IC

4-110

re-authentication

 

 

 

 

 

 

 

dot1x timeout

Sets the time that a switch port waits after

IC

4-111

quiet-period

the Max Request Count has been

 

 

 

exceeded before attempting to acquire a

 

 

 

new client

 

 

 

 

 

 

dot1x timeout

Sets the time period after which a

IC

4-111

re-authperiod

connected client must be

 

 

 

re-authenticated

 

 

 

 

 

 

dot1x timeout

Sets the time period during an

IC

4-112

tx-period

authentication session that the switch

 

 

 

waits before re-transmitting an EAP

 

 

 

packet

 

 

 

 

 

 

show dot1x

Shows all dot1x related information

PE

4-112

 

 

 

 

4-106

Page 354
Image 354
SMC Networks SMC6224M manual 32 802.1X Port Authentication