D-Link DGS-3212SR, Command Line Interface Reference Manual

Page: 204 / 269

DGS-3212SR Layer 3 Gigabit Switch
24
802.1X C
OMMANDS
The DGS-3212SR implements the server-side of the IEEE 802.1x Port-based Network Access Control. This mechanism is
intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each
port on the switch that a user or network device must meet before allowing that port to forward or receive frames.
The 802.1X commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following
table.
Command Parameters
enable 802.1x
disable 802.1x
show 802.1x auth_state ports [<portlist>]
show 802.1x
auth_configuration ports [<portlist>]
config 802.1x auth_mode [port_based | mac_based]
config 802.1x capability ports
[<portlist> | all] [default | {direction [both | in] | port_control
[force_unauth | auto | force_auth] | quiet_period <sec 0-
65535> | tx_period <sec 1-65535> | supp_timeout <sec 1-
65535> | server_timeout <sec 1-65535> | max_req <value
1-10> | reauth_period <sec 1-65535> | enable_reauth
[enable | disable]}]
config 802.1x init {port_based ports [<portlist> | all]} | mac_based [ports]
[<portlist> | all] {mac_address <macaddr>}]
config 802.1x reauth [ port_based ports [<portlist>|all] | mac_based [ports]
[<portlist>|all] {mac_address <macaddr>}]
config radius add <server_index 1-3> <server_ip> key <passwd 32> [default
{auth_port <udp_port_number 1-65535> | acct_port
<udp_port_number 1-65535>}]
config radius delete <server_index 1-3>
config radius <server_index 1-3> {ipaddress <server_ip> | key <passwd
32> [auth_port <udp_port_number 1-65535> acct_port
<udp_port_number 1-65535>]}
show radius
[<portlist> | all] [authenticator | none]
config 802.1x auth_parameter
ports
Each command is listed, in detail, in the following sections.
NOTE: As a stand-alone switch or as a master switch in a switch stack,
the switch number will be referred to as 15 for all configurations, graphs
and tables.
192