68
Asanté IntraCore 36000 Series
•
Each client that needs to be authenticated must have dot1x client software installed and properly
configured.
•
The RADIUS server and 802.1x client support EAP. (The switch only supports EAPOL in order to pass
the EAP packets from the server to the client.)
•
The RADIUS server and client also have to support the same EAP authentication type – MD5, (Some
clients have native support in Windows, otherwise the dot1x client must support it.)
6.6.1: Displaying 802.1x Global Settings
The dot1x protocol includes global parameters that control the client authentication process that runs
between the client and the switch (For example, authenticator), as well as the client identity lookup process
that runs between the switch and authentication server. These parameters are described in this section.
Command Attributes
802.1X Re-authentication – Indicates if switch port requires a client to be re-authenticated after a certain
period.
802.1X Max Request Count – The maximum number of times the switch port will retransmit an EAP request
packet to the client before it times out the authentication session.
Timeout For Quiet Period – Indicates the time that a switch port waits after the Max Request Count has
been exceeded before attempting to acquire a new client.
Timeout For Re-authentication Period – Indicates the time after which a connected client must be re-
authenticated.
Timeout For Tx Period – The period during an authentication session that the switch waits before re-
transmitting an EAP packet.
Supplicant Timeout – The time the switch waits for a client response to an EAP request.
Server Timeout – The time the switch waits for a response from the authentication server (RADIUS) to an
authentication request.
Re-authentication Max Count – The number of times the switch will attempt to re-authenticate a connected
client before the port becomes unauthorized.
Configuring Switch Using the Web or CLI
Web
Click Security – 802.1x, Information
.
