Allied Telesis x510-28GPX, Command Reference Manual

Page: 1846 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1846
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
AAA C
OMMANDS
AAA AUTHENTICATION DOT
1
X
aaa authentication dot1x
Overview This command enables IEEE 802.1X-based authentication globally and allows you
to enable either the default authentication method list (in this case, a list of RADIUS
servers), which is automatically applied to every interface running IEEE
802.1X-based authentication, or a user named authentication method list, which is
applied to an interface with the
dot1x authentication command.
Use the no variant of this command to disable either the default or a named
method list for 802.1X-based authentication. Once all method lists are disabled
802.1x-based authentication is disabled globally.
Syntax
aaa authentication dot1x {default|< list-name >} group
{< group-name >|radius}
no aaa authentication dot1x {default|< list-name >}
Default 802.1X-based Port Authentication is disabled by default.
Mode Global Configuration
Usage This command can be used to configure either the default authentication method
list or a named authentication method list:
• default : the default authentication method list which is automatically
applied to all interfaces with 802.1X-based authentication enabled.
• < list-name> : a user named list which can be applied to an interface using the
aaa authentication dot1x command.
There are two ways to define servers where RADIUS accounting messages are sent:
• group radius : use all RADIUS servers configured by radius-server host
command
• group < group-name> : use the specified RADIUS server group configured
with the aaa group server command
Examples To enable 802.1X-based authentication globally with all RADIUS servers, and use
all available RADIUS servers, use the command:
awplus# configure terminal
awplus(config)# aaa authentication dot1x default group radius
Parameter Description
default
Configure the default authentication method list
< list-name >
Configure a named authentication method list
group
Use a server group
< group-name >
Server group name.
radius
Use all RADIUS servers.