Kontron CP6923, Reference Manual, Page: 93 / 480

CP6923 Switching Commands
Page 2 - 49 CP6923 CLI Reference Manual
If you use the optional parameter '
detail <slot/port
>', the detailed dot1x configuration for the specified port is
displayed.
Port Status Indicates whether the port is authorized or unauthorized. Possible values are authorized |
unauthorized.
Term Definition
Port The interface whose configuration is displayed.
Protocol Version The protocol version associated with this port. The only possible value is 1, corresponding to
the first version of the dot1x specification.
PAE Capabilities The port access entity (PAE) functionality of this port. Possible values are Authenticator or
Supplicant.
Control Mode The configured control mode for this port. Possible values are force-unauthorized | force-
authorized | auto.
Authenticator PAE
State
Current state of the authenticator PAE state machine. Possible values are Initialize,
Disconnected, Connecting, Authenticating, Authenticated, Aborting, Held, ForceAuthorized,
and ForceUnauthorized.
Backend
Authentication
State
Current state of the backend authentication state machine. Possible values are Request,
Response, Success, Fail, Timeout, Idle, and Initialize.
Quiet Period The timer used by the authenticator state machine on this port to define periods of time in
which it will not attempt to acquire a supplicant. The value is expressed in seconds and will be
in the range 0 and 65535.
Transmit Period The timer used by the authenticator state machine on the specified port to determine when to
send an EAPOL EAP Request/Identity frame to the supplicant. The value is expressed in
seconds and will be in the range of 1 and 65535.
Guest-VLAN ID The guest VLAN identifier configured on the interface.
Guest VLAN Period The time in seconds for which the authenticator waits before authorizing and placing the port
in the Guest VLAN, if no EAPOL packets are detected on that port.
Supplicant
Timeout
The timer used by the authenticator state machine on this port to timeout the supplicant. The
value is expressed in seconds and will be in the range of 1 and 65535.
Server Timeout The timer used by the authenticator on this port to timeout the authentication server. The value
is expressed in seconds and will be in the range of 1 and 65535.
Maximum
Requests
The maximum number of times the authenticator state machine on this port will retransmit an
EAPOL EAP Request/Identity before timing out the supplicant. The value will be in the range
of 1 and 10.
Vlan-assigned The VLAN assigned to the port by the radius server. This is only valid when the port control
mode is not Mac-based.
VLAN Assigned
Reason
The reason the VLAN identified in the VLAN-assigned field has been assigned to the port.
Possible values are RADIUS, Unauthenticated VLAN, Guest VLAN, default, and Not
Assigned. When the VLAN Assigned Reason is ‘Not Assigned’t, it means that the port has not
been assigned to any VLAN by dot1x.
Reauthentication
Period
The timer used by the authenticator state machine on this port to determine when
reauthentication of the supplicant takes place. The value is expressed in seconds and will be
in the range of 1 and 65535.
Reauthentication
Enabled
Indicates if reauthentication is enabled on this port. Possible values are ‘True” or “False”.
Key Transmission
Enabled
Indicates if the key is transmitted to the supplicant for the specified port. Possible values are
True or False.
Control Direction The control direction for the specified port or ports. Possible values are both or in.
Term Definition