xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
234
DGS-3627:5#enable 802.1x
Command: enable 802.1x
Success.
DGS-3627:5#
show 802.1x auth_configuration
Purpose
Used to display the current configuration of the 802.1X server on the Switch.
Syntax
show 802.1x auth_configuration {ports [<portlist> | all]}
Description The
show 802.1x auth_configuration
command is used to display 802.1X
configurations of some or all ports.
Parameters
ports <portlist>
−
Specifies a port or range of ports to view. The beginning and end
of the port list range are separated by a dash. Non-contiguous portlist entries are
separated by a comma. (ex: 1-3,7-9)
all
– Specify to view all ports.
The following details are displayed:
802.1X Enabled / Disabled
−
Shows the current status of 802.1X functions on the
Switch.
Authentication Mode
– Shows the authentication mode, whether it be by MAC
address or by port.
Authentication Protocol: Radius_Eap
−
Shows the authentication protocol suite in
use between the Switch and a RADIUS server.
Port number
−
Shows the physical port number on the Switch.
Capability: Authenticator/None
−
Shows the capability of 802.1X functions on the
port number displayed above. There are two 802.1X capabilities that can be set on
the Switch: Authenticator and None.
AdminCtlDir: Both / In
−
Shows whether a controlled Port that is unauthorized will
exert control over communication in both receiving and transmitting directions, or
just the receiving direction.
OpenCtlDir: Both / In
−
Shows whether a controlled Port that is unauthorized will
exert control over communication in both receiving and transmitting directions, or
just the receiving direction.
Port Control: ForceAuth / ForceUnauth / Auto
−
Shows the administrative control
over the port’s authorization status. ForceAuth forces the Authenticator of the port
to become Authorized. ForceUnauth forces the port to become Unauthorized.
QuietPeriod
−
Shows the time interval between authentication failure and the start
of a new authentication attempt.
TxPeriod
−
Shows the time to wait for a response from a supplicant (user) to send
EAP Request / Identity packets.
SuppTimeout
−
Shows the time to wait for a response from a supplicant (user) for
all EAP packets, except for the Request / Identity packets.
ServerTimeout
−
Shows the length of time to wait for a response from a Radius
server.
MaxReq
−
Shows the maximum number of times to retry sending packets to the
supplicant.
ReAuthPeriod
−
Shows the time interval between successive re-authentications.
ReAuthenticate: Enabled / Disabled
−
Shows whether or not to re-authenticate.
Restrictions None.
Example usage:
To display the 802.1X authentication states:
