D-Link DXS-3600 Series Reference Manual page 799

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
Method
State
Aging Time/Block Time
Idle Time
802.1X Authenticator State
802.1X Backend State
authentication.
The Authentication method, such as 802.1X, MAC-Auth, Web-Auth,
JWAC, etc...
The method authentication state.
Authenticating – Host is under authentication by this method.
Success – Host pass this method authentication.
Selected – This method's authentication result is taken and parsed by
system for the host.
Failure – Host fail at this method authentication.
No Information – Authentication info is unavailable.
Aging Time: Specifies a time period during which an authenticated
host will be kept in an authenticated state. When the aging time has
timed-out, the host will be moved back to an unauthenticated state.
Blocked Time: If a host fails to pass the authentication, the next
authentication will not start within the block time unless the user clears
the entry state manually.
Idle Time: Indicates the leftover time of an authenticated session that
will be terminated if the session sustains no activity for the configured
period of time. It is only available for WEB sessions.
Indicates the 802.1X authenticator PAE state: It can be one of the
following values:
INITIALIZE - Indicates the authenticator is initializing the state
machine and ready to authenticate the supplicant.
DISCONNECTED - Indicates that the state machine initialization has
finished, but no supplicant connects to this port.
CONNECTING - Indicates that the switch has detected a supplicant
connecting to this port. The PAE will attempt to establish
communication with a supplicant.
AUTHENTICATING - Indicates that a supplicant is being
authenticated.
AUTHENTICATED - Indicates that the Authenticator has successfully
authenticated the supplicant.
ABORTING - Indicates that the authentication procedure is being
prematurely aborted due to the receipt of a re-authentication request,
an EAPOL-Start frame, an EAPOL-Logoff frame, or an authentication
timeout.
HELD - Indicates that the state machine ignores and discards all
EAPOL packets in order to discourage brute force attacks. This state is
entered from the AUTHENTICATING state following an authentication
failure.
FORCE_AUTH - Indicates that the supplicant is always authorized.
FORCE_UNAUTH - Indicates that the supplicant is always
unauthorized.
Indicates the 802.1X backend PAE state. It can be one of the following
values:
REQUEST - Indicates that the state machine has received an EAP
request packet from the authentication server and is relaying that
packet to the Supplicant as an EAPOL-encapsulated frame.
RESPONSE: Indicates that the state machine has received an
EAPOL-encapsulated EAP Response packet from the supplicant and
is relaying the EAP packet to the authentication Server.
SUCCESS: Indicates that the authentication server has confirmed that
the supplicant is a legal client. The backend state machine will notify
799