Digisol DG-GS4826S, Management Manual

Page: 765 / 1344

C
HAPTER
29 | Authentication Commands
802.1X Port Authentication
– 765 –
C
OMMAND
M
ODE
Global Configuration
E
XAMPLE
Console(config)#dot1x system-auth-control
Console(config)#
dot1x intrusion-
action
This command sets the port’s response to a failed authentication, either to
block all traffic, or to assign all traffic for the port to a guest VLAN. Use the
no form to reset the default.
S
YNTAX
dot1x intrusion-action { block-traffic | guest-vlan }
no dot1x intrusion-action
block-traffic - Blocks traffic on this port.
guest-vlan - Assigns the user to the Guest VLAN.
D
EFAULT
block-traffic
C
OMMAND
M
ODE
Interface Configuration
C
OMMAND
U
SAGE
For guest VLAN assignment to be successful, the VLAN must be configured
and set as active (see the vlan database command) and assigned as the
guest VLAN for the port (see the network-access guest-vlan command).
E
XAMPLE
Console(config)#interface eth 1/2
Console(config-if)#dot1x intrusion-action guest-vlan
Console(config-if)#
dot1x max-req
This command sets the maximum number of times the switch port will
retransmit an EAP request/identity packet to the client before it times out
the authentication session. Use the no form to restore the default.
S
YNTAX
dot1x max-req count
no dot1x max-req
count – The maximum number of requests (Range: 1-10)