Clear Multiauth Session-Timeout; Configuring Vlan Authorization (Rfc 3580); Purpose - Enterasys SecureStack B3 Configuration Manual

clear multiauth session-timeout

Use this command to reset the maximum number of consecutive seconds an authenticated session
may last before termination of the session to its default value of 0.
Syntax
clear multiauth session-timeout [dot1x | mac | pwa]
Parameters
dot1x
mac
pwa
Defaults
If no authentication method is specified, the session timeout value is reset to its default value of 0
for all authentication methods.
Mode
Switch mode, read‐write.
Example
This example resets the session timeout value for the IEEE 802.1X authentication method to 0
seconds.
B3(su)->clear multiauth session-timeout dot1x

Configuring VLAN Authorization (RFC 3580)

Purpose

RFC 3580 Tunnel Attributes provide a mechanism to contain an 802.1X authenticated user to a
VLAN regardless of the PVID. Up to three users can be configured per Gigabit port.
Please see section 3‐31 of RFC 3580 for details on configuring a RADIUS server to return the
desired tunnel attributes. As stated in RFC 3580, "... it may be desirable to allow a port to be placed
into a particular Virtual LAN (VLAN), defined in [IEEE8021Q], based on the result of the
authentication."
The RADIUS server typically indicates the desired VLAN by including tunnel attributes within its
Access‐Accept parameters. However, the IEEE 802.1X authenticator can also be configured to
instruct the VLAN to be assigned to the supplicant by including tunnel attributes within Access‐
Request parameters.
The following tunnel attributes are used in VLAN authorization assignment, :
• Tunnel‐Type ‐ VLAN (13)
• Tunnel‐Medium‐Type ‐ 802
• Tunnel‐Private‐Group‐ID ‐ VLANID
(Optional) Specifies the IEEE 802.1X port‐based network access control
authentication method for which to reset the timeout value to its
default.
(Optional) Specifies the Enterasys MAC authentication method for
which to reset the timeout value to its default.
(Optional) Specifies the Enterasys Port Web Authentication method for
which to reset the timeout value to its default.
clear multiauth session-timeout
SecureStack B3 Configuration Guide 20-41