Table of Contents
Advertisement
Command Mode
Global Configuration
Command Usage
• When 802.1X is disabled, the access point does not support 802.1X
authentication for any station. After successful 802.11 association, each
client is allowed to access the network.
• When 802.1X is supported, the access point supports 802.1X
authentication only for clients initiating the 802.1X authentication process
(i.e., the access point does NOT initiate 802.1X authentication). For stations
initiating 802.1X, only those stations successfully authenticated are allowed
to access the network. For those stations not initiating 802.1X, access to
the network is allowed after successful 802.11 association.
• When 802.1X is required, the access point enforces 802.1X authentication
for all 802.11 associated stations. If 802.1X authentication is not initiated by
the station, the access point will initiate authentication. Only those stations
successfully authenticated with 802.1X are allowed to access the network.
• 802.1X does not apply to the 10/100Base-TX port.
Example
SMC AP(config)#802.1x supported
SMC AP(config)#
802.1x broadcast-key-refresh-rate
This command sets the interval at which the broadcast keys are refreshed for
stations using 802.1X dynamic keying.
Syntax
802.1x broadcast-key-refresh-rate <rate>
rate - The interval at which the access point rotates broadcast keys.
(Range: 0 - 1440 minutes)
Default Setting
0 (Disabled)
Command Mode
Global Configuration
Command Usage
• The access point uses SMC APOL (Extensible Authentication Protocol
Over LANs) packets to pass dynamic unicast session and broadcast keys
to wireless clients. The 802.1x broadcast-key-refresh-rate command
specifies the interval after which the broadcast keys are changed. The
802.1x session-key-refresh-rate command specifies the interval after
which unicast session keys are changed.
802.1X Authentication
7-67
7
Advertisement
Table of Contents
