802.1X Port Configuration - HP 438031-B21 - 1:10Gb Ethernet BL-c Switch Command Reference Manual

802.1x Port configuration

Command: /cfg/l2/8021x/port <port number>
[802.1x Port Configuration Menu]
The 802.1x port menu allows you to configure parameters that affect the selected port in the switch. These
settings override the global 802.1x parameters.
The following table describes the 802.1x Port Configuration Menu options.
802.1x Port Configuration Menu options
Table 105
Command
mode force-
unauth|auto|force-
auth
qtperiod <0-65535>
txperiod <1-65535>
suptmout <1-65535>
svrtmout <1-65535>
maxreq <1-10>
raperiod <1-604800>
reauth on|off
mode - Set access control mode
qtperiod - Set EAP-Request/Identity quiet time interval
txperiod - Set EAP-Request/Identity retransmission timeout
suptmout - Set EAP-Request retransmission timeout
svrtmout - Set server authentication request timeout
maxreq - Set max number of EAP-Request retransmissions
raperiod - Set reauthentication time interval
reauth - Set reauthentication status to on or off
default - Restore default 802.1x configuration
global - Apply current global 802.1x configuration to this port
cur - Display current 802.1x configuration
Description
Sets the type of access control for the port:
force-unauth - the port is unauthorized unconditionally.
auto - the port is unauthorized until it is successfully authorized by the RADIUS
server.
force-auth - the port is authorized unconditionally, allowing all traffic.
The default value is force-auth.
Sets the time, in seconds, the authenticator waits before transmitting an EAP-
Request/ Identity frame to the supplicant (client) after an authentication failure in the
previous round of authentication. The default value is 60 seconds.
Sets the time, in seconds, the authenticator waits for an EAP-Response/Identity frame
from the supplicant (client) before retransmitting an EAP-Request/Identity frame. The
default value is 30 seconds.
Sets the time, in seconds, the authenticator waits for an EAP-Response packet from
the supplicant (client) before retransmitting the EAP-Request packet from the
authentication server. The default value is 30 seconds.
Sets the time, in seconds, the authenticator waits for a response from the RADIUS
server before declaring an authentication timeout. The default value is 30 seconds.
The time interval between transmissions of the RADIUS Access-Request packet
containing the supplicant's (client's) EAP-Response packet is determined by the
current setting of /cfg/sys/radius/timeout (default is 3 seconds).
Sets the maximum number of times the authenticator retransmits an EAP-Request
packet to the supplicant (client). The default value is 2.
Sets the time, in seconds, the authenticator waits before re-authenticating a
supplicant (client) when periodic re-authentication is enabled. The default value is
3600 seconds.
Sets the re-authentication status to on or off. The default value is off.
Configuration Menu
132