Dell S6000-ON, Руководство по настройке

Страница: 90 / 1080

The bold line shows the new port-control state.
Dell(conf-if-Te-1/1/1)#dot1x port-control force-authorized
Dell(conf-if-Te-1/1/1)#show dot1x interface TenGigabitEthernet 1/1/1
802.1x information on Te 1/1/1:
-----------------------------
Dot1x Status: Enable
Port Control: FORCE_AUTHORIZED
Port Auth Status: UNAUTHORIZED
Re-Authentication: Disable
Untagged VLAN id: None
Tx Period: 90 seconds
Quiet Period: 120 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 10
Auth Type: SINGLE_HOST
Auth PAE State: Initialize
Backend State: Initialize
Auth PAE State: Initialize
Backend State: Initialize
Re-Authenticating a Port
You can configure the authenticator for periodic re-authentication.
After the supplicant has been authenticated, and the port has been authorized, you can configure the
authenticator to re-authenticate the supplicant periodically. If you enable re-authentication, the
supplicant is required to re-authenticate every 3600 seconds by default, and you can configure this
interval. You can configure the maximum number of re-authentications as well.
To configure re-authentication time settings, use the following commands:
• Configure the authenticator to periodically re-authenticate the supplicant.
INTERFACE mode
dot1x reauthentication [interval] seconds
The range is from 1 to 65535.
The default is 3600 .
• Configure the maximum number of times the supplicant can be re-authenticated.
INTERFACE mode
dot1x reauth-max number
The range is from 1 to 10.
The default is 2 .
Example of Re-Authenticating a Port and Verifying the Configuration
The bold lines show that re-authentication is enabled and the new maximum and re-authentication time
period.
Dell(conf-if-Te-1/1/1)#dot1x reauthentication interval 7200
Dell(conf-if-Te-1/1/1)#dot1x reauth-max 10
90
802.1X