ZyXEL Communications XS3800-28 Cli Reference Manual page 122

Chapter 33 IEEE 802.1x Authentication Commands
Table 87 port-access-authenticator Command Summary (continued)
COMMAND
port-access-authenticator
eapol-flood
port-access-authenticator
<port-list>
port-access-authenticator
<port-list> guest-vlan
port-access-authenticator
<port-list> guest-vlan <vlan-id>
port-access-authenticator
<port-list> guest-vlan Host-mode
Multi-host
port-access-authenticator
<port-list> guest-vlan Host-mode
Multi-secure [<1-24>]
port-access-authenticator
<port-list> max-req <1-10>
port-access-authenticator
<port-list> quiet-period <0-
65535>
port-access-authenticator
<port-list> supp-timeout <30-
65535>
port-access-authenticator
<port-list> tx-period <1-65535>
port-access-authenticator
<port-list> reauthenticate
port-access-authenticator
<port-list> reauth-period <1-
65535>
show port-access-authenticator
show port-access-authenticator
<port-list>
DESCRIPTION
Floods EAPoL (EAP over LAN) packets to all ports in the
same VLAN.
EAPOL is a port authentication protocol used in IEEE 802.1x.
It is used to encapsulate and transmit EAP packets
between the supplicant (a client device that requests
access to the network resources or services) and
authenticator (the Switch) directly over the LAN.
EAPoL flood will not take effect when you enable 802.1x
authentication in the web configurator or CLI using port-
access-authenticator.
Enables 802.1x authentication on the specified port(s).
Enables the guest VLAN feature on the listed ports.
Sets the guest VLAN ID number on the listed ports.
Sets the Switch to authenticate only the first client that
connects to the listed ports.
If the first user enters the correct credential, any other users
are allowed to access the port without authentication.
Otherwise, they are all put in the guest VLAN. Once the first
user who did authentication logs out or disconnects from
the port, rest of the users are blocked until a user does the
authentication process again.
Sets the Switch to authenticate each client that connects
to the listed ports. Optionally, sets the maximum number of
the clients that the Switch authenticates on the port(s). The
maximum number supported varies by Switch (24 in this
example).
Sets the number of times the Switch tries to authenticate
client(s) before sending unresponsive ports to the guest
VLAN.
Sets the number of seconds the port(s) remains in the HELD
state and rejects further authentication requests from the
client after a failed authentication exchange.
Sets the number of seconds the Switch waits for client's
response to the challenge request before sending a
request again.
Sets the number of seconds the Switch waits before re-
sending an identity request to clients on the listed ports.
Sets a subscriber to periodically re-enter his or her
username and password to stay connected to a specified
port.
Specifies how often (in seconds) a client has to re-enter the
username and password to stay connected to the
specified port(s).
Displays all port authentication settings.
Displays port authentication settings on the specified
port(s).
Ethernet Switch CLI Reference Guide
122
M P
C 13
C 13
C 13
C 13
C 13
C 13
C 13
C 13
C 13
C 13
C 13
C 13
E 3
E 3