Set Dot1X Auth-Config - Enterasys SECURESTACK C3 Configuration Manual

set dot1x auth-config

Use this command to configure 802.1X authentication.
Syntax
set dot1x auth-config {[authcontrolled-portcontrol {auto | forced-auth |
forced-unauth}] [maxreq value] [quietperiod value] [reauthenabled {false | true}]
[reauthperiod value] [servertimeout timeout] [supptimeout timeout] [txperiod
value]} [port-string]
Parameters
authcontrolled‐
portcontrol
auto | forced‐auth |
forced‐unauth
maxreq value
quietperiod value
reauthenabled false |
true
reauthperiod value
servertimeout timeout
supptimeout timeout
txperiod value
port‐string
Defaults
If port‐string is not specified, authentication parameters will be set on all ports.
Mode
Switch command, read‐write.
Specifies the 802.1X port control mode.
• auto – Set port control mode to auto controlled port control. This
is the default value.
• forced‐auth – Set port control mode to ForcedAuthorized
controlled port control.
• forced‐unauth – Set port control mode to ForcedUnauthorized
controlled port control.
Specifies the maximum number of authentication requests allowed
by the backend authentication state machine. Valid values are 1 – 10.
Default value is 2.
Specifies the time (in seconds) following a failed authentication
before another attempt can be made by the authenticator PAE state
machine. Valid values are 0 – 65535. Default value is 60 seconds.
Enables (true) or disables (false) reauthentication control of the
reauthentication timer state machine. Default value is false.
Specifies the time lapse (in seconds) between attempts by the
reauthentication timer state machine to reauthenticate a port. Valid
values are 0 – 65535. Default value is 3600 seconds.
Specifies a timeout period (in seconds) for the authentication server,
used by the backend authentication state machine. Valid values are 1
– 300. Default value is 30 seconds.
Specifies a timeout period (in seconds) for the authentication
supplicant used by the backend authentication state machine. Valid
values are 1 – 300. Default value is 30 seconds.
Specifies the period (in seconds) which passes between authenticator
PAE state machine EAP transmissions. Valid values are 0 – 65535.
Default value is 30 seconds.
(Optional) Limits the configuration of desired settings to specified
port(s). For a detailed description of possible port‐string values, refer
to "Port String Syntax Used in the CLI" on page 7‐1.
set dot1x auth-config
SecureStack C3 Configuration Guide 26-19