Ubiquiti EDGESWITCH ES-24-250W Command Reference Manual page 244

EdgeSwitch CLI Command Reference
Term
Transmit Period
Guest-VLAN ID
Guest VLAN Period
Supplicant Timeout
Server Timeout
Maximum Requests
Configured MAB Mode
Operational MAB Mode
Vlan-ID
VLAN Assigned Reason
Reauthentication Period
Reauthentication Enabled
Key Transmission Enabled
EAPOL Flood Mode Enabled
Control Direction
Maximum Users
Unauthenticated VLAN ID
Session Timeout
Session Termination Action
Example: The following shows example CLI display output for the command .
(UBNT EdgeSwitch) #show dot1x detail 0/3
Port........................................... 0/1
Protocol Version............................... 1
PAE Capabilities............................... Authenticator
Control Mode................................... auto
Authenticator PAE State........................ Initialize
Backend Authentication State................... Initialize
Quiet Period (secs)............................ 60
Transmit Period (secs)......................... 30
Guest VLAN ID.................................. 0
Guest VLAN Period (secs)....................... 90
Supplicant Timeout (secs)...................... 30
Ubiquiti Networks, Inc.
Definition
The timer used by the authenticator state machine on the specified port to determine when to send
an EAPOL EAP Request/Identity frame to the supplicant. The value is expressed in seconds and will be
in the range of 1 and 65535.
The guest VLAN identifier configured on the interface.
The time in seconds for which the authenticator waits before authorizing and placing the port in the
Guest VLAN, if no EAPOL packets are detected on that port.
The timer used by the authenticator state machine on this port to timeout the supplicant. The value is
expressed in seconds and will be in the range of 1 and 65535.
The timer used by the authenticator on this port to timeout the authentication server. The value is
expressed in seconds and will be in the range of 1 and 65535.
The maximum number of times the authenticator state machine on this port will retransmit an EAPOL
EAP Request/Identity before timing out the supplicant. The value will be in the range of 1 and 10.
The administrative mode of the MAC authentication bypass feature on the switch.
The operational mode of the MAC authentication bypass feature on the switch. MAB might be
administratively enabled but not operational if the control mode is not MAC based.
The VLAN assigned to the port by the RADIUS server. This is only valid when the port control mode is
not Mac-based.
The reason the VLAN identified in the VLAN-assigned field has been assigned to the port. Possible
values are RADIUS, Unauthenticated VLAN, Guest VLAN, default, and Not Assigned. When the VLAN
Assigned Reason is Not Assigned, it means that the port has not been assigned to any VLAN by 802.1X.
This only valid when the port control mode is not MAC-based.
The timer used by the authenticator state machine on this port to determine when reauthentication of
the supplicant takes place. The value is expressed in seconds and will be in the range of 1 and 65535.
Indicates if reauthentication is enabled on this port. Possible values are 'True" or "False" .
Indicates if the key is transmitted to the supplicant for the specified port. Possible values are True or
False.
Indicates whether the EAPOL flood support is enabled on the switch. Possible values are True or False.
The control direction for the specified port or ports. Possible values are both or in.
The maximum number of clients that can get authenticated on the port in the MAC-based 802.1X
authentication mode. This value is used only when the port control mode is not MAC-based.
Indicates the unauthenticated VLAN configured for this port. This value is valid for the port only when
the port control mode is not MAC-based.
Indicates the time for which the given session is valid. The time period in seconds is returned by the
RADIUS server on authentication of the port. This value is valid for the port only when the port control
mode is not MAC-based.
This value indicates the action to be taken once the session timeout expires. Possible values
are Default, Radius-Request. If the value is Default, the session is terminated the port goes into
unauthorized state. If the value is Radius-Request, then a reauthentication of the client authenticated
on the port is performed. This value is valid for the port only when the port control mode is not MAC-
based.
Switching Commands
244