802.1X Supplicant Policy Authentication - Alcatel-Lucent OmniSwitch 6250 Cli Reference Manual

802.1X Commands

802.1x supplicant policy authentication

Configures a supplicant device classification policy for an 802.1x port. This type of policy uses 802.1x
authentication via a remote RADIUS server. A supplicant is any device that uses the 802.1x protocol for
authentication.
802.1x slot/port supplicant policy authentication [[pass] {group-mobility | vlan vid | default-vlan |
block | captive-portal}...] [[fail] {vlan vid | block | captive-portal}...]
Syntax Definitions
slot/port
pass
fail
group-mobility
vlan vid
default-vlan
block
captive-portal
Defaults
When 802.1x is enabled on the port, a default supplicant policy is defined for the port. This policy uses the
group-mobility and default-vlan parameters for the pass case and the block parameter for the fail case.
When the 802.1x supplicant policy authentication command is used without specifying any parameters,
the following values for the pass and fail case are configured by default:
parameter
pass
fail
Platforms Supported
OmniSwitch 6250
Usage Guidelines
•
Supplicant device classification policies are applied only when successful 802.1x authentication does
not return a VLAN ID, returns a VLAN ID that does not exist, or authentication fails.
•
When authentication does return a VLAN ID that exists in the switch configuration, the supplicant is
assigned to that VLAN and no further classification is performed.
OmniSwitch 6250 CLI Reference Guide
The slot and port number of the 802.1x port.
Indicates which policies to apply if 802.1x authentication is successful
but does not return a VLAN ID.
Indicates which policies to apply if 802.1x authentication fails or if
successful authentication returns a VLAN ID that does not exist.
Use Group Mobility rules for device classification.
Use this VLAN ID number for device classification.
Assigns supplicant to the default VLAN for the 802.1x port.
Blocks supplicant access on the 802.1x port.
Use Captive Portal for web-based device classification.
default
block
block
November 2009 page 44-9