802.1X Commands - Alcatel OmniStack LS 6248 User Manual

802.1x Commands

.
Command Function
aaa authentication Specifies one or more authentication, authorization, and
dot1x accounting (AAA) methods for use on interfaces running IEEE
802.1X. To return to the default configuration, use the no form of
this command
dot1x Enables 802.1x globally. To return to the default configuration, use
system-auth-control the no form of this command
dot1x port-controll Auto - Enables 802.1X authentication on the interface and causes
the port to transition to the authorized or unauthorized state based
on the 802.1X authentication exchange between the port and the
client.
Force-authorized - Disables 802.1X authentication on the
interface and causes the port to transition to the authorized state
without any authentication exchange required. The port resends
and receives normal traffic without 802.1X-based authentication
of the client.
Force-unauthorized -Denies all access through this interface by
forcing the port to transition to the unauthorized state and ignoring
all attempts by the client to authenticate. The device cannot
provide authentication services to the client through the interface.
dot1x Enables periodic re-authentication of the client. To return to the
re-authentication default configuration, use the no form of this command.
dot1x timeout Sets the number of seconds between re-authentication attempts.
re-authperiod To return to the default configuration, use the no form of this
command.
dot1x Manually initiates a re-authentication of all 802.1X-enabled ports
re-authenticate or the specified 802.1X-enabled port
dot1x timeout Sets the number of seconds that the device remains in the quiet
quiet-period state following a failed authentication exchange (for example, the
client provided an invalid password). To return to the default
configuration, use the no form of this command
dot1x timeout Sets the number of seconds that the device waits for a response
tx-period to an Extensible Authentication Protocol (EAP)-request/identity
frame from the client before resending the request. To return to the
default configuration, use the no form of this command
dot1x max-req Sets the maximum number of times that the device sends an
Extensible Authentication Protocol (EAP)-request/identity frame
(assuming that no response is received) to the client, before
restarting the authentication process. To return to the default
configuration, use the no form of this command
dot1x timeout Sets the time for the retransmission of an Extensible
supp-timeout Authentication Protocol (EAP)-request frame to the client. To
return to the default configuration, use the no form of this
command
Table 4-5. 802.1x Commands
802.1x Commands
Mode Page
GC 4-264
GC 4-265
ICE 4-266
ICE 4-267
ICE 4-268
PE 4-269
ICE 4-269
ICE 4-270
ICE 4-271
ICE 4-272
263
4