Ericsson ECN330, User Manual

Page: 680 / 1226

Command Line Interface
674
1553-KDU 137 365 Uen D 2006-06-16
Example
802.1X Port Authentication
The ECN330-switch supports IEEE 802.1X (dot1x) port-based access control
that prevents unauthorized access to the network by requiring users to first
submit credentials for authentication. Client authentication is controlled centrally
by a RADIUS server using EAP (Extensible Authentication Protocol).
Table 65 802.1X Port Authentication Commands
Console#show mac-learning
Port MAC-Learng-stuatus
1/1 Enable
1/2 Disable
1/3 Enable
1/4 Enable
1/5 Enable
.
.
.
Command Function Mode Page
dot1x system-
auth-control
Enables dot1x globally on the ECN330-switch. GC 675
dot1x default
Resets all dot1x parameters to their default
values. GC 676
dot1x max-req
Sets the maximum number of times that the
ECN330-switch retransmits an EAP request/
identity packet to the client before it times out
the authentication session IC 676
dot1x port-
control
Sets dot1x mode for a port interface IC 677
dot1x operation-
mode
Allows single or multiple hosts on a port IC 678