xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual
config 802.1x auth_parameter
Purpose
Used to configure the 802.1x Authentication parameters on a
range of ports. The default parameter will return all ports in the
specified range to their default 802.1x settings.
Syntax
config 802.1x auth_parameter ports [<portlist> | all]
[default | {direction [both | in] | port_control [force_unauth |
auto | force_auth] | quiet_period <sec 0-65535>| tx_period
<sec 1-65535> | supp_timeout <sec 1-65535> |
server_timeout <sec 1-65535> | max_req <value 1-10> |
reauth_period <sec 1-65535> | enable_reauth [enable |
disable]}]
Description
The
config 802.1x auth_parameter
command is used to
configure the 802.1x Authentication parameters on a range of
ports. The default parameter will return all ports in the specified
range to their default 802.1x settings.
<portlist>
−
Specifies a range of ports. The port list is specified by
listing the lowest slot number and the beginning port number on
that slot, separated by a colon. Then the highest slot number, and
the highest port number of the range (also separated by a colon)
are specified. The beginning and end of the port list range are
separated by a dash. For example, 1:3 specifies slot number 1,
port 3. 2:4 specifies slot number 2, port 4. 1:3-2:4 specifies all of
the ports between slot 1, port 3 and slot 2, port 4
−
in numerical
order.
all
−
Specifies all of the ports on the Switch.
default
−
Returns all of the ports in the specified range to their
802.1x default settings.
direction [both | in]
−
Determines whether a controlled port blocks
communication in both the receiving and transmitting directions, or
just the receiving direction.
port_control
−
Configures the administrative control over the
authentication process for the range of ports. The user has the
following authentication options:
quiet_period <sec 0-65535>
−
Configures the time interval
between authentication failure and the start of a new
authentication attempt.
tx_period <sec 1-65535>
- Configures the time to wait for a
response from a supplicant (user) to send EAP Request/Identity
packets.
supp_timeout <sec 1-65535>
- Configures the time to wait for a
response from a supplicant (user) for all EAP packets, except for
the Request/Identity packets.
server_timeout <sec 1-65535>
- Configure the length of time to
wait for a response from a RADIUS server.
max_req <value 1-10>
−
Configures the number of times to retry
Parameters
•
force_auth
−
Forces the Authenticator for the port to
become authorized. Network access is allowed.
•
auto
−
Allows the port’s status to reflect the outcome of
the authentication process.
•
force_unauth
−
Forces the Authenticator for the port to
become unauthorized. Network access will be blocked.
198
