Enterasys SecureStack C2, Configuration Manual

Page: 538 / 607

set dot1x auth-config
18-14 Security Configuration
[ reauthperiod value ] [ servertimeout timeout ] [ supptimeout timeout ] [ txperiod
value ]} [ port-string]
Parameters
Defaults
If port ‐ string is not specified, authentication parameters will be set on all ports.
Mode
Switch command, read ‐ write.
Examples
This example shows how to enable reauthentication control on ports
ge
.1.1 ‐ 3:
C2(su)->set dot1x auth-config reauthenabled true ge.1.1-3
This example shows how to set the 802.1X quiet period to 120 seconds on ports
ge
.1.1 ‐ 3:
C2(su)->set dot1x auth-config quietperiod 120 ge.1.1-3
authcontrolled ‐
portcontrol
auto | forced ‐ auth |
forced ‐ unauth
Specifies the 802.1X port control mode.
• auto – Set port control mode to auto controlled port control. This
is the default value.
• forced ‐ auth – Set port control mode to ForcedAuthorized
controlled port control.
• forced ‐ unauth – Set port control mode to ForcedUnauthorized
controlled port control.
maxreq value Specifies the maximum number of authentication requests allowed
by the backend authentication state machine. Valid values are 1 – 10 .
Default value is 2.
quietperiod value Specifies the time (in seconds) following a failed authentication
before another attempt can be made by the authenticator PAE state
machine. Valid values are 0 – 65535 . Default value is 60 seconds.
reauthenabled false |
true
Enables ( true ) or disables ( false ) reauthentication control of the
reauthentication timer state machine. Default value is false.
reauthperiod value Specifies the time lapse (in seconds) between attempts by the
reauthentication timer state machine to reauthenticate a port. Valid
values are 0 – 65535 . Default value is 3600 seconds.
servertimeout timeout Specifies a timeout period (in seconds) for the authentication server,
used by the backend authentication state machine. Valid values are 1
– 300 . Default value is 30 seconds.
supptimeout timeout Specifies a timeout period (in seconds) for the authentication
supplicant used by the backend authentication state machine. Valid
values are 1 – 300 . Default value is 30 seconds.
txperiod value Specifies the period (in seconds) which passes between authenticator
PAE state machine EAP transmissions. Valid values are 0 – 65535 .
Default value is 30 seconds.
port ‐ string (Optional) Limits the configuration of desired settings to specified
port(s). For a detailed description of possible port ‐ string values, refer
to “ Port String Syntax Used in the CLI ” on page 5 ‐ 2.