43
4.8. IEEE802.1X Authentication Function Configuration
Configure the IEEE802.1X port-based and MAC-based authentication in "Global configuration mode"
and "Interface configuration mode." Confirm the basic information by entering "show dot1x <1-2 or
1,2,3 or 1,2,3-5>" in "Privileged mode."
NAS ID configuration command <Port based mode, MAC based mode>
Global configuration mode
dot1x nas-id <NASID>
Authentication operation configuration command <Port based mode>
Interface configuration mode
dot1x port-control {auto | force-authorized |
force-unauthorized}
Periodical re-authentication enable command <Port based mode>
Interface configuration mode dot1x
re-authentication
Periodical re-authentication disable command <Port based mode>
Interface configuration mode
no dot1x re-authentication
Re-authentication interval configuration command <Port based mode, MAC based mode>
Interface configuration mode
dot1x timeout re-authperiod <1-65535>
Client timeout configuration command <Port based mode, MAC based mode>
Interface configuration mode
dot1x timeout supp-timeout <1-65535>
Authentication server timeout configuration command <Port based mode, MAC based mode>
Interface configuration mode
dot1x timeout server <1-65535>
Waiting time configuration command after authentication fails <Port based mode, MAC based mode>
Interface configuration mode
dot1x timeout quiet-period <1-65535>
Request interval configuration command for resending authentication <Port based mode, MAC based
mode>
Interface configuration mode
dot1x timeout tx-period <1-65535>
Maximum retry times configuration command for resending authentication <Port based mode, MAC
based mode>
Interface configuration mode
dot1x max-req <1-10>
Re-authentication status initialization command <Port based mode>
Interface configuration mode dot1x
re-authenticate
Authentication status initialization command <Port based mode>
Interface configuration mode
dot1x init
Control direction configuration command for authentication requests <Port based mode, MAC based
mode>
Interface configuration mode
dot1x control-direction {both | in}
Supplicant numbers configuration command <Port based mode>
Interface configuration mode
dot1x supplicant-num <1-512>
Authentication mode switching command <Port based mode, MAC based mode>
Interface configuration mode
dot1x port-auth-mode {port-based | mac-based}
