Configuration Guide (Supporting R2.2.0.0) Owner's manual

Brocade 6910 Ethernet Access Switch Configuration Guide 173
53-1002651-02
9
802.1X Port Authentication
General Commands
dot1x default
This command sets all configurable dot1x global and port settings to their default values.
Command Mode
Global Configuration
Authenticator Commands
dot1x intrusion-action Sets the port response to intrusion when authentication fails IC
dot1x max-reauth-req Sets the maximum number of times that the switch sends an
EAP-request/identity frame to the client before restarting the
authentication process
IC
dot1x max-req Sets the maximum number of times that the switch retransmits an
EAP request/identity packet to the client before it times out the
authentication session
IC
dot1x operation-mode Allows single or multiple hosts on an dot1x port IC
dot1x port-control Sets dot1x mode for a port interface IC
dot1x re-authentication Enables re-authentication for all ports IC
dot1x timeout quiet-period Sets the time that a switch port waits after the Max Request Count
has been exceeded before attempting to acquire a new client
IC
dot1x timeout re-authperiod Sets the time period after which a connected client must be
re-authenticated
IC
dot1x timeout supp-timeout Sets the interval for a supplicant to respond IC
dot1x timeout tx-period Sets the time period during an authentication session that the
switch waits before re-transmitting an EAP packet
IC
dot1x re-authenticate Forces re-authentication on specific ports PE
Supplicant Commands
dot1x identity profile Configures dot1x supplicant user name and password GC
dot1x max-start Sets the maximum number of times that a port supplicant will send
an EAP start frame to the client
IC
dot1x pae supplicant Enables dot1x supplicant mode on an interface IC
dot1x timeout auth-period Sets the time that a supplicant port waits for a response from the
authenticator
IC
dot1x timeout held-period Sets the time a port waits after the maximum start count has been
exceeded before attempting to find another authenticator
IC
dot1x timeout start-period Sets the time that a supplicant port waits before resending an
EAPOL start frame to the authenticator
IC
Information Display Commands
show dot1x Shows all dot1x related information PE
TABLE 45 802.1X Port Authentication Commands (Continued)
Command Function Mode