C
ONFIGURING THE
• Each switch port that will be used must be set to dot1x "Auto" mode.
• Each client that needs to be authenticated must have dot1x client
software installed and properly configured.
• The RADIUS server and 802.1x client support EAP. (The switch only
supports EAPOL in order to pass the EAP packets from the server to
the client.)
• The RADIUS server and client also have to support the same EAP
authentication type – MD5, TLS, TTLS, PEAP, etc. (Some clients have
native support in Windows, otherwise the dot1x client must support it.)
Displaying 802.1x Global Settings
The dot1x protocol includes global parameters that control the client
authentication process that runs between the client and the switch (i.e.,
authenticator), as well as the client identity lookup process that runs
between the switch and authentication server. These parameters are
described in this section.
Command Attributes
• dot1x Re-authentication – Indicates if switch port requires a client to
be re-authenticated after a certain period of time.
• dot1x Max Request Count – The maximum number of times the switch
port will retransmit an EAP request packet to the client before it times
out the authentication session.
• Timeout for Quiet Period – Indicates the time that a switch port waits
after the Max Request Count has been exceeded before attempting to
acquire a new client.
• Timeout for Re-authentication Period – Indicates the time period
after which a connected client must be re-authenticated.
• Timeout for TX Period – The time period during an authentication
session that the switch waits before re-transmitting an EAP packet.
• Supplicant timeout – The time the switch waits for a client response to
an EAP request.
3-34
S
WITCH
Need help?
Do you have a question about the SMC6724L3 and is the answer not in the manual?