D-Link DWS-4000 Series Cli Command Reference page 71

Note: MAC-based dot1x authentication is supported on the BCM56224, BCM56514, BCM56624, and BCM56820
platforms.
Term Definition
Port The interface whose configuration is displayed.
Protocol Version The protocol version associated with this port. The only possible value is 1, corresponding to the first
version of the dot1x specification.
PAE Capabilities The port access entity (PAE) functionality of this port. Possible values are Authenticator or Supplicant.
Control Mode The configured control mode for this port. Possible values are force-unauthorized | force-authorized |
auto | mac-based.
Authenticator PAE Current state of the authenticator PAE state machine. Possible values are Initialize, Disconnected,
State Connecting, Authenticating, Authenticated, Aborting, Held, ForceAuthorized, and ForceUnauthorized.
When MAC-based authentication is enabled on the port, this parameter is deprecated.
Backend Current state of the backend authentication state machine. Possible values are Request, Response,
Authentication Success, Fail, Timeout, Idle, and Initialize. When MAC-based authentication is enabled on the port,
State this parameter is deprecated.
Quiet Period The timer used by the authenticator state machine on this port to define periods of time in which it will
not attempt to acquire a supplicant. The value is expressed in seconds and will be in the range 0 and
65535.
Transmit Period The timer used by the authenticator state machine on the specified port to determine when to send an
EAPOL EAP Request/Identity frame to the supplicant. The value is expressed in seconds and will be
in the range of 1 and 65535.
Guest-VLAN ID The guest VLAN identifier configured on the interface.
Guest VLAN Period The time in seconds for which the authenticator waits before authorizing and placing the port in the
Guest VLAN, if no EAPOL packets are detected on that port.
Supplicant The timer used by the authenticator state machine on this port to timeout the supplicant. The value is
Timeout expressed in seconds and will be in the range of 1 and 65535.
Server Timeout The timer used by the authenticator on this port to timeout the authentication server. The value is
expressed in seconds and will be in the range of 1 and 65535.
Maximum The maximum number of times the authenticator state machine on this port will retransmit an EAPOL
Requests EAP Request/Identity before timing out the supplicant. The value will be in the range of 1 and 10.
Vlan-assigned The VLAN assigned to the port by the radius server. This is only valid when the port control mode is
not Mac-based.
VLAN Assigned The reason the VLAN identified in the VLAN-assigned field has been assigned to the port. Possible
Reason values are RADIUS, Unauthenticated VLAN, Guest VLAN, default, and Not Assigned. When the VLAN
Assigned Reason is Not Assigned, it means that the port has not been assigned to any VLAN by dot1x.
This only valid when the port control mode is not MAC-based.
Reauthentication The timer used by the authenticator state machine on this port to determine when reauthentication of
Period the supplicant takes place. The value is expressed in seconds and will be in the range of 1 and 65535.
Reauthentication Indicates if reauthentication is enabled on this port. Possible values are 'True" or "False".
Enabled
Key Transmission Indicates if the key is transmitted to the supplicant for the specified port. Possible values are True or
Enabled False.
Control Direction The control direction for the specified port or ports. Possible values are both or in.
Maximum Users The maximum number of clients that can get authenticated on the port in the MAC-based dot1x
authentication mode. This value is used only when the port control mode is not MAC-based.
Port-Based Network Access Control Commands
63