Alcatel-Lucent 7710 SR SONET, Руководство по настройке

Страница: 257 / 496

Interface Configuration
7710 SR OS Interface Configuration Guide Page 231
802.1x Port Commands
max-auth-req
Syntax max-auth-req max-auth-request
Context config>port>ethernet>dot1x
Description This command configures the maximum number of times that the 7710 SR will send an access request
RADIUS message to the RADIUS server. If a reply is not received from the RADIUS server after the
specified
number attempts, the 802.1x authentication procedure is considered to have failed.
The no form of this command returns the value to the default.
Default
2
Parameters
max-auth-request — The maximum number of RADIUS retries.
Values
1 — 10
port-control
Syntax port-control [ auto | force-auth | force-unauth ]
Context config>port>ethernet>dot1x
Description
This command configures the 802.1x authentication mode.
The no form of this command returns the value to the default.
Default force-auth
Parameters force-auth — Disables 802.1x authentication and causes the port to transition to the authorized state
without requiring any authentication exchange. The port transmits and receives normal traffic without
requiring 802.1x-based host authentication.
force-unauth — Causes the port to remain in the unauthorized state, ignoring all attempts by the hosts to
authenticate. The switch cannot provide authentication services to the host through the interface.
auto — Enables 802.1x authentication. The port starts in the unauthorized state, allowing only EAPOL
frames to be sent and received through the port. Both the 7710 SR and the host can initiate an
authentication procedure. The port will remain in un-authorized state (no traffic except EAPOL frames
is allowed) until the first client is authenticated successfully. After this, traffic is allowed on the port for
all connected hosts.