Specifications

Configuring Authentication
April 15, 2011 Page 21 of 36
Procedure 6describessettingtheMultiAuthidleandsessiontimeoutforCEP.
Configuring MultiAuth Authentication
ConfiguringMultiAuthauthenticationconsistsof:
•SettingMultiAuthauthenticationmodesetting
•SettingMultiAuthauthenticationprecedencesettings
•SettingMultiAuthauthenticationportproperties
•SettingMultiAuthauthenticationidletimeoutvalues
•SettingMultiAuthauthenticationsessiontimeoutvalues
•SettingMultiAuthauthenticationtrapsettings
Setting MultiAuth Authentication Mode
MultiAuthauthenticationmodecanbesettoMultiAuthorstrict802.1Xsingleusermode.Set
MultiAuthauthenticationtoMultiAuthwhenmultipleusersneedtobeauthenticatedfor802.1X
orinallcasesforMAC,PWA,andCEPauthentication.
Procedure 7describessettingtheMultiAuthauthenticationmode.
Setting MultiAuth Authentication Precedence
MultiAuthauthenticationadministrativeprecedencegloballydetermineswhichauthentication
methodwillbeselectedwhenauserissuccessfullyauthenticatedformultipleauthentication
methodsonasingleport.Whenausersuccessfullyauthentica tesmorethanonemethodatthe
sametime,theprecedenceoftheauthenticationmethodswilldeterminewhichRADIUS‐returned
Filter
‐IDwillbeprocessedandresultinanappliedtrafficpolicyprofile.
MultiAuthauthenticationprecedencedefaultstothefollowingorderfromhightolow:802.1x,
PWA,MAC,andCEP(802.1x,PWA,andMAConstackablefixedswitchandstandalonefixed
Procedure 6 DNS and DHCP Spoofing Configuration
Step Task Command(s)
1. Optionally set the MultiAuth authentication idle
timeout for this switch.
set multiauth idle-timeout cep timeout
2. Optionally set the MultiAuth authentication
session timeout for this switch.
set multiauth session-timeout cep timeout
Procedure 7 MultiAuth Authentication Configuration
Step Task Command(s)
1. For a single user, single authentication 802.1x
port configuration, set MultiAuth mode to strict.
set multiauth mode strict
2. For multiple user 802.1x authentication or any
non-802.1x authentication, set the system
authentication mode to use multiple
authenticators simultaneously.
set multiauth mode multi
3. To clear the MultiAuth authentication mode. clear multiauth mode