Table of Contents
Advertisement
802.1x Global configuration
The global 802.1x commands allow you to configure parameters that affect all ports in the switch. The following
table describes the 802.1x Global Configuration commands.
Table 103 802.1x Global Configuration commands
Command
dot1x mode {[force-unauthorized|
auto|force-authorized]}
dot1x quiet-time <0-65535>
dot1x transmit-interval
<1-65535>
dot1x supplicant-timeout
<1-65535>
dot1x server-timeout <1-65535>
dot1x max-request <1-10>
dot1x re-authentication-interval
<1-604800>
[no] dot1x re-authenticate
default dot1x
show dot1x
Description
Sets the type of access control for all ports:
force-unauth
auto
- the port is unauthorized until it is successfully authorized
by the RADIUS server.
force-auth
- the port is authorized unconditionally, allowing all
traffic.
force-auth
The default value is
Command mode: Global configuration
Sets the time, in seconds, the authenticator waits before transmitting
an EAP-Request/ Identity frame to the supplicant (client) after an
authentication failure in the previous round of authentication. The
default value is 60 seconds.
Command mode: Global configuration
Sets the time, in seconds, the authenticator waits for an EAP-
Response/Identity frame from the supplicant (client) before
retransmitting an EAP-Request/Identity frame. The default value is 30
seconds.
Command mode: Global configuration
Sets the time, in seconds, the authenticator waits for an EAP-
Response packet from the supplicant (client) before retransmitting the
EAP-Request packet to the authentication server. The default value is
30 seconds.
Sets the time, in seconds, the authenticator waits for a response from
the Radius server before declaring an authentication timeout. The
default value is 30 seconds.
The time interval between transmissions of the RADIUS Access-
Request packet containing the supplicant's (client's) EAP-Response
packet is determined by the current setting of radius-server timeout
(default is 3 seconds).
Command mode: Global configuration
Sets the maximum number of times the authenticator retransmits an
EAP-Request packet to the supplicant (client). The default value is 2.
Command mode: Global configuration
Sets the time, in seconds, the authenticator waits before re-
authenticating a supplicant (client) when periodic re-authentication is
enabled. The default value is 3600 seconds.
Command mode: Global configuration
Sets the re-authentication status to
off
.
Command mode: Global configuration
Resets the global 802.1x parameters to their default values.
Command mode: Global configuration
Displays current global 802.1x parameters.
Command mode: All
N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 102
- the port is unauthorized unconditionally.
.
on
off
or
. The default value is
Advertisement
Table of Contents
