U
SER

A

UTHENTICATION

C

OMMANDS

22-34

802.1X Port Authentication

The switch supports IEEE 802.1X (dot1x) port-based access control that

prevents unauthorized access to the network by requiring users to first

submit credentials for authentication. Client authentication is controlled

centrally by a RADIUS server using EAP (Extensible Authentication

Protocol).

Table 22-12 802.1X Port Authentication Commands
Command Function Mode Page
dot1x
system-auth-control
Enables dot1x globally on the switch. GC 22-35
dot1x default Resets all dot1x parameters to their
default values
GC 22-35
dot1x max-req Sets the maximum number of times
that the switch retransmits an EAP
request/identity packet to the client
before it times out the authentication
session
IC 22-36
dot1x port-control Sets dot1x mode for a port interface IC 22-36
dot1x operation-mode Allows single or multiple hosts on an
dot1x port
IC 22-37
dot1x re-authenticate Forces re-authentication on specific
ports
PE 22-38
dot1x re-authentication Enables re-authentication for all ports IC 22-39
dot1x timeout
quiet-period
Sets the time that a switch port waits
after the Max Request Count has been
exceeded before attempting to acquire
a new client
IC 22-39
dot1x timeout
re-authperiod
Sets the time period after which a
connected client must be
re-authenticated
IC 22-40