Dell PowerConnect W-7200 Series, Reference Manual

Page: 22 / 1538

22 | aaa authentication dot1x Dell PowerConnect W-Series ArubaOS 6.2 | Reference Guide
Parameter Description Range Default
termination Sets options for terminating 802.1X authentication on
the controller.
eap-type <type>
The Extensible Authentication Protocol (EAP)
method, either EAP-PEAP or EAP-TLS. eap-
peap/
eap-tls eap-peap
enable
Enables 802.1X termination on the controller. — disabled
enable-token
-caching
If you select EAP-GTC as the inner EAP method, you
can enable the controller to cache the username
and password of each authenticated user. The
controller continues to reauthenticate users with the
remote authentication server, however, if the
authentication server is not available, the controller
will inspect its cached credentials to reauthenticate
users. — disabled
inner-eap-type eap-gtc|eap-
mschapv2
When EAP-PEAP is the EAP method, one of the
following inner EAP types is used:
EAP-Generic Token Card (GTC): Described in RFC
2284, this EAP method permits the transfer of
unencrypted usernames and passwords from client
to server. The main uses for EAP-GTC are one-time
token cards such as SecureID and the use of LDAP
or RADIUS as the user authentication server. You
can also enable caching of user credentials on the
controller as a backup to an external authentication
server.
EAP-Microsoft Challenge Authentication Protocol
version 2 (MS-CHAPv2): Described in RFC 2759, this
EAP method is widely supported by Microsoft
clients. eap-
gtc/ea-
p-
mscha-
pv2 eap-
mschap
v2
token-caching-period
<hours> If you select EAP-GTC as the inner EAP method, you
can specify the timeout period, in hours, for the
cached information. (any) 24 hours
timer
Sets timer options for 802.1X authentication:
idrequest-
period <seconds> Interval, in seconds, between identity request
retries. 1-65535 30
seconds
mkey-rotation-period
<seconds>
Interval, in seconds, between multicast key rotation. 60-
864000 1800
seconds
quiet-period <seconds> Interval, in seconds, following failed authentication. 1-65535 30
seconds
reauth-period <seconds>
Interval, in seconds, between reauthentication
attempts, or specify server to use the server-
provided reauthentication period. 60-
864000 86400
seconds
(1 day)
ukey-rotation-period
<seconds>
Interval, in seconds, between unicast key rotation. 60-
864000 900
seconds
wpa-groupkey
-delay <milliseconds>
Interval, in milliseconds, between unicast and
multicast key exchanges. 0-2000 0 ms
(no delay)