User`s manual

User’s Manual 71
CLI
This enables re-authentication and sets all of the global parameters for 802.1x.
Console(config)#dot1x re-authentication
Console(config)#dot1x max-req 5
Console(config)#dot1x timeout quiet-period 40
Console(config)#dot1x timeout re-authperiod 5
Console(config)#dot1x timeout tx-period 40
Console(config)#authentication dot1x default radius
Console(config)#
6.6.3 Configuring Port Authorization Mode
When dot1x is enabled, you need to specify the dot1x authentication mode configured for each port.
Command Attributes
Status – Indicates if authentication is enabled or disabled on the port.
Operation Mode – Allows single or multiple hosts (clients) to connect to an 802.1X-authorized port. (Range:
Single-Host, Multi-Host; Default: Single-Host)
Max Count – The maximum number of hosts that can connect to a port when the Multi-Host operation mode
is selected. (Range: 1-20; Default: 5)
Mode – Sets the authentication mode to one of the following options:
• Auto – Requires a dot1x-aware client to be authorized by the authentication server. Clients that are not
dot1x-aware will be denied access.
• Force-Authorized – Forces the port to grant access to all clients, either dot1x-aware or otherwise.
• Force-Unauthorized – Forces the port to deny access to all clients, either dot1x-aware or otherwise.
Authorized – Sets the authorization:
• Yes – Connected client is authorized.
• No – Connected client is not authorized.
• Blank – Displays nothing when dot1x is disabled on a port.
Supplicant – Indicates the MAC address of a connected client.
Trunk – Indicates if the port is configured as a trunk port.