Edge-Core ES3628C, Руководство по управлению, Страница: 411 / 674

Authentication Commands
4-85
4
- Mode – Dot1x port control mode (page 4-81).
- Authorized – Authorization status (yes or n/a - not authorized).
• 802.1X Port Details – Displays the port access control parameters for each
interface, including the following items:
- reauth-enabled
– Periodic re-authentication (page 4-82).
- reauth-period – Time after which a connected client must be
re-authenticated (page 4-83).
- quiet-period – Time a port waits after Max Request Count is
exceeded before attempting to acquire a new
client (page 4-83).
- tx-period – Time a port waits during authentication session
before re-transmitting EAP packet (page 4-84).
- supplicant-timeout – Supplicant timeout.
- server-timeout – Server timeout.
- reauth-max – Maximum number of reauthentication attempts.
- max-req – Maximum number of times a port will retransmit
an EAP request/identity packet to the client
before it times out the authentication session
(page 4-80).
- Status – Authorization status (authorized or not).
- Operation Mode – Shows if single or multiple hosts (clients) can
connect to an 802.1X-authorized port.
- Max Count – The maximum number of hosts allowed to
access this port (page 4-81).
- Port-control – Shows the dot1x mode on a port as auto,
force-authorized, or force-unauthorized
(page 4-81).
- Supplicant – MAC address of authorized client.
- Current Identifier – The integer (0-255) used by the Authenticator to
identify the current authentication session.
• Authenticator State Machine
- State – Current state (including initialize, disconnected,
connecting, authenticating, authenticated,
aborting, held, force_authorized,
force_unauthorized).
- Reauth Count – Number of times connecting state is re-entered.
• Backend State Machine
- State – Current state (including request, response,
success, fail, timeout, idle, initialize).
- Request Count – Number of EAP Request packets sent to the
Supplicant without receiving a response.
- Identifier(Server) – Identifier carried in the most recent EAP
Success, Failure or Request packet received
from the Authentication Server.