SMC Networks SMC6724L3 manual Displaying 802.1x Global Settings, Command Attributes

CONFIGURING THE SWITCH

•Each switch port that will be used must be set to dot1x “Auto” mode.

•Each client that needs to be authenticated must have dot1x client software installed and properly configured.

•The RADIUS server and 802.1x client support EAP. (The switch only supports EAPOL in order to pass the EAP packets from the server to the client.)

•The RADIUS server and client also have to support the same EAP authentication type – MD5, TLS, TTLS, PEAP, etc. (Some clients have native support in Windows, otherwise the dot1x client must support it.)

Displaying 802.1x Global Settings

The dot1x protocol includes global parameters that control the client authentication process that runs between the client and the switch (i.e., authenticator), as well as the client identity lookup process that runs between the switch and authentication server. These parameters are described in this section.

Command Attributes

•dot1x Re-authentication– Indicates if switch port requires a client to be re-authenticated after a certain period of time.

•dot1x Max Request Count – The maximum number of times the switch port will retransmit an EAP request packet to the client before it times out the authentication session.

•Timeout for Quiet Period – Indicates the time that a switch port waits after the Max Request Count has been exceeded before attempting to acquire a new client.

•Timeout for Re-authentication Period – Indicates the time period after which a connected client must be re-authenticated.

•Timeout for TX Period – The time period during an authentication session that the switch waits before re-transmitting an EAP packet.

•Supplicant timeout – The time the switch waits for a client response to an EAP request.

3-34