Specifications

Configuring Authentication
April 15, 2011 Page 14 of 36
Configuring Authentication
Thissectionprovidesdetailsfortheconfigurationofauthenticationmethods,MultiAuthand
RADIUS.
Table 1listsAuthenticati onparametersandtheirdefaultvalues.
For information about... Refer to page...
Configuring IEEE 802.1x 16
Configuring MAC-based Authentication 17
Configuring Port Web Authentication (PWA) 18
Configuring Convergence End Point (CEP) 19
Configuring MultiAuth Authentication 21
Configuring RADIUS 26
Table 1 Default Authentication Parameters
Parameter Description Default Value
cep port Enables or disables CEP for the
specified port.
Disabled.
dot1x Enables and disables 802.1x
authentication both globally and per
port.
Globally: Disabled.
Per Port: Enabled.
dot1x authconfig Configures 802.1x authentication. auto - auto authorization mode.
macauthentication Globally enables or disables MAC
authentication on a device.
Disabled.
macauthentication
authallocated
Sets the number of MAC
authentication sessions supported on
the specified port
Based upon the device and license.
See the firmware release notes for
your device.
macauthentication port Enables or disables MAC
authentication on a port
Disabled.
MultiAuth idle-timeout Specifies the period length for which
no traffic is received before a MultiAuth
session is set to idle.
300 seconds.
MultiAuth mode Globally sets MultiAuth for this device. strict - authentication limited to 802.1x
for a single user on a port.
MultiAuth port mode Specifies the MultiAuth port mode to
use for the specified port.
auth-opt - Authentication is optional
based upon global and port
configuration.
MultiAuth precedence Specifies the authentication mode to
use when multiple authentication types
are successfully authenticated.
Precedence from high to low: 802.1x,
PWA, MAC, CEP.
MultiAuth
session-timeout
Specifies the maximum amount of time
a session can live.
0 - no timeout in effect.