Avaya G250 Administration page 49

3. Use the set port dot1x port-control command to configure the authentication
mode of the LAN port connected to the RADIUS server as force-authorize. This ensures
that the port remains open at all times, so that it will be able to transmit authentication
requests to the RADIUS server. For example, if port 5 is the port that connects to the
RADIUS server, type the following command:
G250-001(super)# set port dot1x port-control 10/5 force-authorize
Done !
G250-001(super)#
G350-001(super)# set port dot1x port-control 6/5 force-authorize
Done !
G350-001(super)#
4. Use the set dot1x system-auth-control enable command to enable 802.1x
authentication on all ports set to auto mode. For example:
G350-001(super)# set dot1x system-auth-control enable
To disable 802.1x authentication on the G250/G350, use the command set dot1x
system-auth-control disable.
Once the authentication process is enabled, the process proceeds as follows:
- The Supplicant is asked to supply a user name and password.
- If 802.1x authentication is enabled on the port, the Authenticator initiates authentication
when the link is up.
- When authentication is completed, the Supplicant receives a Permit/Deny notification.
- Authentication fails if:
- the Supplicant fails to respond to requests from the Authenticator
- Management controls prevent the port from being authorized
- The link is down
- The user supplied incorrect login information
5. For additional security, use the set port dot1x re-authentication command,
followed by the module and port number (or a range of ports) to enable re-authentication on
a port or a group of ports. By default, re-authentication is disabled. For example:
G250-001(super)# set port dot1x re-authentication 10/4-6 enable
G350-001(super)# set port dot1x re-authentication 6/4-6 enable
To disable re-authentication, use this command set port dot1x re-authentication
module/port disable.
Managing login permissions
Issue 1.1 June 2005 49