Alcatel-Lucent 7710 SR OS, Руководство по настройке интерфейса

Страница: 224 / 436

Configuration Commands
Page 224 7710 SR OS Interface Configuration Guide
802.1x Port Commands
max-auth-req
Syntax max-auth-req max-auth-request
Context config>port>ethernet>dot1x
Description
This command configures the maximum number of times that the 7710 SR will send an access
request RADIUS message to the RADIUS server. If a reply is not received from the RADIUS server
after the specified
number attempts, the 802.1x authentication procedure is considered to have failed.
The no form of this command returns the value to the default.
Default 2
Parameters max-auth-request — The maximum number of RADIUS retries.
Values 1 — 10
port-control
Syntax port-control [ auto | force-auth | force-unauth ]
Context config>port>ethernet>dot1x
Description This command configures the 802.1x authentication mode.
The no form of this command returns the value to the default.
Default
force-auth
Parameters
force-auth — Disables 802.1x authentication and causes the port to transition to the authorized state
without requiring any authentication exchange. The port transmits and receives normal traffic
without requiring 802.1x-based host authentication.
force-unauth — Causes the port to remain in the unauthorized state, ignoring all attempts by the
hosts to authenticate. The switch cannot provide authentication services to the host through the
interface.
auto — Enables 802.1x authentication. The port starts in the unauthorized state, allowing only
EAPOL frames to be sent and received through the port. Both the 7710 SR and the host can
initiate an authentication procedure. The port will remain in un-authorized state (no traffic except
EAPOL frames is allowed) until the first client is authenticated successfully. After this, traffic is
allowed on the port for all connected hosts.