Fortinet 548B, Administration Manual

Page: 254 / 976

- 254 -
Command Mode
Global Config
This command sets the authentication mode to be used on the specified port. The control mode may be
one of the following.
force-unauthorized: The authenticator PAE unconditionally sets the controlled port to unauthorized.
force-authorized: The authenticator PAE unconditionally sets the controlled port to authorized.
auto: The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication
exchanges between the supplicant, authenticator, and the authentication server.
mac-based: The authenticator PAE sets the controlled port mode to reflect the outcome of the
authentication exchanges between the supplicant, authenticator, and the authentication server on a per
supplicant basis.
Syntax
dot1x port-control {auto | force-authorized | force-unauthorized | mac-based}
no dot1x port-control
no - This command sets the authentication mode to be used on the specified port to 'auto'.
Default Setting
auto
Command Mode
Interface Config
7.8.3.7 dot1x max-req
This command sets the maximum number of times the authenticator state machine on this port will
transmit an EAPOL EAP Request/Identity frame before timing out the supplicant. The <1-10> value must
be in the range 1 - 10.
Syntax
dot1x max-req <1-10>
no dot1x max-req
<1-10> - maximum number of times (Range: 1 – 10).
no - This command sets the maximum number of times the authenticator state machine on this port
will transmit an EAPOL EAP Request/Identity frame before timing out the supplicant to the default
value, that is, 2.