Installation manual

4-135
SIGNAMAX LLC • www.signamax.eu
802.1X Port Authentication
The switch supports IEEE 802.1X (dot1x) port-based access control that prevents
unauthorized access to the network by requiring users to first submit credentials for
authentication. Client authentication is controlled centrally by a RADIUS server using
EAP (Extensible Authentication Protocol).
dot1x system-auth-control
This command enables 802.1X port authentication globally on the switch. Use the no
form to restore the default.
Syntax
[no] dotx system-auth-control
Default Setting
Disabled
Command Mode
Global Configuration
Example
Table 4-38 802.1X Port Authentication
Command Function Mode Page
dot1x system-auth-control Enables dot1x globally on the switch. GC 4-135
dot1x default Resets all dot1x parameters to their default values GC 4-136
dot1x max-req Sets the maximum number of times that the switch
retransmits an EAP request/identity packet to the client
before it times out the authentication session
IC 4-136
dot1x port-control Sets dot1x mode for a port interface IC 4-136
dot1x operation-mode Allows single or multiple hosts on an dot1x port IC 4-137
dot1x re-authenticate Forces re-authentication on specific ports PE 4-138
dot1x re-authentication Enables re-authentication for all ports IC 4-138
dot1x timeout quiet-period Sets the time that a switch port waits after the Max Request
Count has been exceeded before attempting to acquire a
new client
IC 4-139
dot1x timeout
re-authperiod
Sets the time period after which a connected client must be
re-authenticated
IC 4-139
dot1x timeout tx-period Sets the time period during an authentication session that the
switch waits before re-transmitting an EAP packet
IC 4-140
dot1x intrusion-action Sets the port response to intrusion when authentication fails IC 4-140
show dot1x Shows all dot1x related information PE 4-141
Console(config)#dot1x system-auth-control
Console(config)#