Authentication Port; Force Authorization; Configuring Interval For Retransmitting Request/Identity Packet - Siemens S223 User Manual

User Manual
SURPASS hiD 6615 S223/S323 R1.5
4.5.1.4
4.5.1.5
4.5.1.6
A50010-Y3-C150-2-7619

Authentication Port

After configuring 802.1x authentication mode, you should select the authentication port.
Command
dot1x nas-port PORTS
no dot1x nas-port PORTS

Force Authorization

The hiD 6615 S223/S323 can allow the users to request the access regardless of the au-
thentication from RADIUS server. For example, it is possible to configure not to be au-
thenticated from the server even though a client is authenticated from the server.
To manage the approval for the designated port, use the following command.
Command
dot1x port-control { auto | force-
authorized | force-unauthorized }
PORTS
no dot1x port-control PORTS
auto: Follows the authentication of RADIUS server.
force-authorized: Gives the authorization to a client even though RADIUS server
didn't approve it.
force-unauthorized: Don't give the authorization to a client even though RADIUS
server authenticates it.

Configuring Interval for Retransmitting Request/Identity Packet

In hiD 6615 S223/S323, it is possible to specify how long the device waits for a client to
send back a response/identity packet after the device has sent a request/identity packet.
If the client does not send back a response/identity packet during this time, the device re-
transmits the request/identity packet.
To configure the number of seconds that the switch waits for a response to a re-
quest/identity packet, use the following command.
Command
dot1x timeout tx-period
65535> PORTS
no dot1x timeout tx-period
PORTS
Mode
Designates 802.1x authentication port.
Global
Disables 802.1x authentication port.
Mode
Configures the way of authorization to control port
whether it has the RADIUS authentication or not.
Global
Deletes the configuration of the way of authorization to
control port.
Mode
Sets reattempt interval for requesting request/identity
<1-
packet.
1-65535: retransmit interval (default: 30)
Global
Disables the interval for requesting identity.
UMN:CLI
Description
Description
Description
67