9-23
Cisco Catalyst Blade Switch 3120 for HP Software Configuration Guide
OL-12247-01
Chapter 9 Configuring IEEE 802.1x Port-Based Authentication
Configuring IEEE 802.1x Authentication
•
Configuring IEEE 802.1x Authentication with WoL, page 9-39
(optional)
•
Configuring MAC Authentication Bypass, page 9-40
(optional)
•
Configuring NAC Layer 2 IEEE 802.1x Validation, page 9-41
(optional)
•
Configuring Web Authentication, page 9-42
•
Disabling IEEE 802.1x Authentication on the Port, page 9-44
(optional)
•
Resetting the IEEE 802.1x Authentication Configuration to the Default Values, page 9-45
(optional)
Default IEEE 802.1x Authentication Configuration
Table 9-2
shows the default IEEE 802.1x authentication configuration.
Table 9-2
Default IEEE 802.1x Authentication Configuration
Feature
Default Setting
Switch IEEE 802.1x enable state
Disabled.
Per-port IEEE 802.1x enable state
Disabled (force-authorized).
The port sends and receives normal traffic without IEEE
802.1x-based authentication of the client.
AAA Disabled.
RADIUS server
•
IP address
•
UDP authentication port
•
Key
•
None specified.
•
1812.
•
None specified.
Host mode
Single-host mode.
Control direction
Bidirectional control.
Periodic re-authentication
Disabled.
Number of seconds between
re-authentication attempts
3600 seconds.
Re-authentication number
2 times (number of times that the switch restarts the
authentication process before the port changes to the
unauthorized state).
Quiet period
60 seconds (number of seconds that the switch remains in
the quiet state following a failed authentication exchange
with the client).
Retransmission time
30 seconds (number of seconds that the switch should
wait for a response to an EAP request/identity frame
from the client before resending the request).
Maximum retransmission number
2 times (number of times that the switch will send an
EAP-request/identity frame before restarting the
authentication process).
