User`s manual

21
8. dot1x command
This command is used configure the general settings of 802.1x function of the
switch. Entering “dot1x ?”, the sub-commands will be shown.
(config)# dot1x ?
authcount Set 802.1x Re-authentication Max Count
max-req Max EAP request/identity packet retransmissions
re-authentication Forces re-authentication on all ports/interfaces
system-auth-control Enables/disables 802.1x to change port modes
timeout Timeout value
dot1x authcount x command is used to set max count for re-authentication
request in the re-authentication process. If the max count is met, it will
become un-authentication state. The valid value of “x” is 1~10.
dot1x max-req x command is used to set max request timeout count between
the switch and RADIUS server before authentication fail. The valid value of “x”
is 1~10.
dot1x re-authentication command is used to force re-authentication on all
ports.
dot1x system-auth-control command is used to enable 802.1x function on the
switch. And no dot1x system-auth-control command can be used to disable
it.
dot1x timeout ... command is used to setup timeout values in 802.1x operation.
Entering “dot1x timeout ?”, the sub-command will be shown.
(config)# dot1x timeout ?
quiet-period Time after Max Request Count before gets new client
re-authperiod Time after connected client must be re-authenticated
server-period Time after an authenticator sends a RADIUS Access-Request
packet to the authentication server
supplicant-period Time after an authenticator sends an EAP-Request/ MD5
Challenge frame to a supplicant
tx-period Time switch waits before re-transmitting EAP packet
dot1x timeout quiet-period x command is used to set the quiet time value
between the switch and the user before next authentication process when
authentication fail. The valid value of “x” is 0~65535.
dot1x timeout re-authperiod x command is used to set the timeout period
for doing re-authentication process. The valid value of “x” is 0~65535.
dot1x timeout server-period x command is used to set the request timeout
value between the switch and RADIUS server. The valid value of “x” is
0~65535.
dot1x timeout supplicant-period x command is used to set the timeout
value between the switch and users (called “supplicant” in 802.1x) after first
identification. The valid value of “x” is 0~65535.
dot1x timeout tx-period x command is used to set the timeout value for the
identification request from the switch to users. The request will be re-tried
until the authcount is met. After that, authentication fail message will be sent.
The valid value of “x” is 0~65535.