RUGGEDCOM ROX II
CLI User Guide
Chapter 6
Security
Configuring Port Security
133
Parameter
Description
•
per_macaddress
- Only packets from authorized MAC addresses are forwarded.
Authorized MAC addresses are either preconfigured in the static MAC address table or
learned dynamically.
•
off
- Disables security on the port
auto-learn { auto-learn }
Synopsis:
A 32-bit signed integer between 0 and 16
Default:
0
The maximum number of MAC addresses that can be learned dynamically by the port.
This includes static MAC addresses defined in the Static MAC Address table. Therefore,
the actual number of learned MAC addresses is this number minus the number of
addresses defined in the Static MAC Address table.
Security Mode must be set to either
per_macaddress
or
dot1x_mac_auth
.
shutdown-time { shutdown-time }
Synopsis:
A 32-bit signed integer between 1 and 86400
The time in seconds (s) the port will be disabled if a security violation occurs.
Shutdown Enable must be enabled.
admin-shutdown
When enabled, the port is automatically shut down if a security violation occurs. The port
is enabled automatically after the period of time specified by Shutdown Time.
4. Configure the IEEE 802.1x settings by configuring the following parameter(s) as required:
Parameter
Description
tx-period { tx-period }
Synopsis:
A 32-bit signed integer between 1 and 65535
Default:
30
The maximum time in seconds (s) allowed for one full set of packets to be transferred
between the port and its client.
quiet-period { quiet-period }
Synopsis:
A 32-bit signed integer between 0 and 65535
Default:
60
The time in seconds (s) to wait before retransmitting EAPoL packets to the client after a
failed authentication session.
reauth-enable
When enabled, the port will attempt to reauthenticate the client periodically. The period
of time between each reauthentication attempt is specified by Reauthentication Period.
The port is considered unauthorized when the maximum number of reauthentication
attempts (as defined by Reauthentication Max Attempts) is exceeded.
reauth-period { reauth-period }
Synopsis:
A 32-bit signed integer between 60 and 86400
Default:
3600
The period of time in seconds (s) the port will wait before attempting to reauthenticate
the client.
Reauthentication must be enabled.
reauth-max { reauth-max }
Synopsis:
A 32-bit signed integer between 1 and 10
Default:
2
The maximum number of unsuccessful reauthentication attempts allowed, after which
the client is considered unauthorized.
Reauthentication must be enabled.
supp-timeout { supp-timeout }
Synopsis:
A 32-bit signed integer between 1 and 300
Default:
30
The period of time in seconds (s) the port will wait to receive the client's response to the
authentication server's request. If no response is received by the end of this period, the
authentication session fails.
server-timeout { server-timeout }
Synopsis:
A 32-bit signed integer between 1 and 300
Default:
30
Summary of Contents for RUGGEDCOM ROX II
Page 2: ...RUGGEDCOM ROX II CLI User Guide ii ...
Page 4: ...RUGGEDCOM ROX II CLI User Guide iv ...
Page 39: ...RUGGEDCOM ROX II CLI User Guide Table of Contents xxxix 19 5 VLANs 752 ...
Page 40: ...Table of Contents RUGGEDCOM ROX II CLI User Guide xl ...
Page 46: ...Preface RUGGEDCOM ROX II CLI User Guide xlvi Customer Support ...
Page 170: ...Chapter 5 System Administration RUGGEDCOM ROX II CLI User Guide 124 Deleting a Scheduled Job ...
Page 256: ...Chapter 6 Security RUGGEDCOM ROX II CLI User Guide 210 Enabling Disabling a Firewall ...
Page 402: ...Chapter 11 Wireless RUGGEDCOM ROX II CLI User Guide 356 Managing Cellular Modem Profiles ...
