Allied Telesis x510-28GPX, Справочник по командам

Страница: 1756 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 1756
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
A
UTHENTICATION
C
OMMANDS
AUTH TWO
-
STEP ENABLE
auth two-step enable
Overview This command enables a two-step authentication feature on an interface. When
this feature is enabled, the supplicant is authorized in a two-step process. If
authentication succeeds, the supplicant becomes authenticated. This command
will apply the two-step authentication method based on 802.1X-, MAC- or
Web-Authentication.
The no variant of this command disables the two-step authentication feature.
Syntax
auth two-step enable
no auth two-step enable
Default Two step authentication is disabled by default.
Mode Interface Configuration for a static channel, a dynamic (LACP) channel group, or a
switch port; or Authentication Profile mode.
Usage The single step authentication methods (either user or device authentication) have
a potential security risk:
• an unauthorized user can access the network with an authorized device, or
• an authorized user can access the network with an unauthorized device.
Two-step authentication solves this problem by authenticating both the user and
the device. The supplicant will only become authenticated if both these steps are
successful. If the first authentication step fails, then the second step is not started.
Examples To enable the two step authentication feature, use the following commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# auth two-step enable
To disable the two step authentication feature, use the following commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# no auth two-step enable
To enable MAC-Authentication followed by 802.1X-Authentication, use the
following commands:
awplus# configure terminal
awplus(config)# interface port1.0.2
awplus(config-if)# switchport mode access
awplus(config-if)# auth-mac enable
awplus(config-if)# dot1x port-control auto
awplus(config-if)# auth dynamic-vlan-creation
awplus(config-if)# auth two-step enable