AS5800-EC Series CLI Reference Guide R02

Chapter 8 | Authentication Commands
802.1X Port Authentication
– 246 –
◆ 802.1X Port Details – Displays the port access control parameters for each
interface, including the following items:
■
Reauthentication – Periodic re-authentication (page 242).
■
Reauth Period – Time after which a connected client must be re-
authenticated (page 243).
■
Quiet Period – Time a port waits after Max Request Count is exceeded
before attempting to acquire a new client (page 243).
■
TX Period – Time a port waits during authentication session before re-
transmitting EAP packet (page 244).
■
Supplicant Timeout – Supplicant timeout.
■
Server Timeout – Server timeout. A RADIUS server must be set before the
correct operational value of 10 seconds will be displayed in this field.
■
Reauth Max Retries – Maximum number of reauthentication attempts.
■
Max Request – Maximum number of times a port will retransmit an EAP
request/identity packet to the client before it times out the authentication
session (page 240).
■
Operation Mode– Shows if single or multiple hosts (clients) can connect to
an 802.1X-authorized port.
■
Port Control–Shows the dot1x mode on a port as auto, force-authorized, or
force-unauthorized (page 242).
■
Intrusion Action– Shows the port response to intrusion when
authentication fails (page 239).
■
Supplicant– MAC address of authorized client.
◆ Authenticator PAE State Machine
■
State – Current state (including initialize, disconnected, connecting,
authenticating, authenticated, aborting,
held, force_authorized,
force_unauthorized).
■
Reauth Count– Number of times connecting state is re-entered.
■
Current Identifier– The integer (0-255) used by the Authenticator to identify
the current authentication session.
◆ Backend State Machine
■
State – Current state (including request, response, success, fail, timeout,
idle, initialize).
■
Request Count– Number of EAP Request packets sent to the Supplicant
without receiving a response.
■
Identifier (Server)– Identifier carried in the most recent EAP Success, Failure
or Request packet received from the Authentication Server.
◆ Reauthentication State Machine
State – Current state (including initialize, reauthenticate).
Example
Console#show dot1x
Global 802.1X Parameters
System Auth Control : Enabled