Specifications
236
DCS-3950 series Ethernet switch manual
Usage Guide: dot1x re-authentication must be enabled first before supplicant
re-authentication interval can be modified. If authentication is not enabled for the switch,
the supplicant re-authentication interval set will not take effect.
Example: Set the re-authentication time to 1200 seconds.
Switch(Config)#dot1x timeout re-authperiod 1200
14.2.2.20 dot1x timeout tx-period
Command: dot1x timeout tx-period <seconds>
no dot1x timeout tx-period
Function: Set the interval for the supplicant to re-transmit EAP request/identity frame; the
‘no dot1x timeout tx-period’ command restores the default setting.
Parameters: <seconds> is the interval for re-transmission of EAP request frames, in
seconds; the valid range is 1 to 65535.
Command mode: Global Mode
Default: The default value is 30 seconds.
Usage Guide: Default value is recommended.
Example: Set the EAP request frame re-transmission interval to 1200 seconds.
Switch(Config)#dot1x timeout tx-period 1200
14.2.2.21 dot1x unicast enable
Command: dot1x unicast enable
no dot1x unicast enable
Function: Enable unicast for 802.1x authentications.
Command mode: Global Mode.
Default: The unicast for 802.1x is not enabled by default.
Usage Guide: Before configuring 802.1x authentication for any ports, 802.1x should be
enabled globally, then the 802.1x unicasting should be enabled too.
Example: Enable 802.1x configuration and 802.1x unicast configuration, then enable
802.1x authentication for ethernet port 0/0/1.
Switch(Config)#dot1x enable
Switch(Config)# dot1x unicast enable
Switch(Config)#interface Ethernet 0/0/1
Switch(Config-Ethernet0/0/1)#dot1x enable
14.2.2.22 dot1x user free-resource
Command: dot1x user free-resource <prefix> <mask>
no dot1x user free-resource
Function: Set free access network resource for unauthorized dot1x user. The ‘no dot1x
user free-resource’ command close the resource.
Parameters:
<prefix> is the resource IP network address in dotted decimal notation.