User guide

5-70
CHAPTER 5: COMMAND LINE INTERFACE
Example
802.1X Authentication
The access point supports IEEE 802.1X access control for wireless clients. This
control feature prevents unauthorized access to the network by requiring an
802.1X client application to submit user credentials for authentication. Client
authentication is then verified by a RADIUS server using EAP (Extensible
Authentication Protocol) before the access point grants client access to the
network. The 802.1X EAP packets are also used to pass dynamic unicast session
keys and static broadcast keys to wireless clients.
Table 20 802.1X Authentication
Enterprise AP#show radius
Radius Server Information
========================================
IP : 0.0.0.0
Port : 1812
Key : *****
Retransmit : 3
Timeout : 5
Radius MAC format : no-delimiter
Radius VLAN format : HEX
========================================
Radius Secondary Server Information
========================================
IP : 0.0.0.0
Port : 1812
Key : *****
Retransmit : 3
Timeout : 5
Radius MAC format : no-delimiter
Radius VLAN format : HEX
========================================
Enterprise AP#
Command Function Mode Page
802.1x Configures 802.1X as disabled, supported, or required IC-W-VAP 5-71
802.1x broadcast-key-
refresh-rate
Sets the interval at which the primary broadcast keys
are refreshed for stations using 802.1X dynamic keying
IC-W-VAP 5-72
802.1x session-key-
refresh-rate
Sets the interval at which unicast session keys are
refreshed for associated stations using dynamic keying
IC-W-VAP 5-73
802.1x session-timeout Sets the timeout after which a connected client must be
re-authenticated
IC-W-VAP 5-73