Edge-Core ES4612, Руководство по управлению, Страница: 393 / 666

Authentication Commands
4-79
4
Example
The following example enables port security for port 5, and sets the response to a
security violation to issue a trap message:
Related Commands
shutdown (4-154)
mac-address-table static (4-166)
show mac-address-table (4-167)
802.1x Port Authentication
The switch supports IEEE 802.1x (dot1x) port-based access control that prevents
unauthorized access to the network by requiring users to first submit credentials for
authentication. Client authentication is controlled centrally by a RADIUS server
using EAP (Extensible Authentication Protocol).
Console(config)#interface ethernet 1/5
Console(config-if)#port security action trap
Table 4-31 802.1x Port Authentication Commands
Command Function Mode Page
authentication dot1x default Sets the default authentication server type GC 4-80
dot1x default Resets all dot1x parameters to their default values GC 4-80
dot1x max-req Sets the maximum number of times that the switch
retransmits an EAP request/identity packet to the client
before it times out the authentication session
GC 4-80
dot1x port-control Sets dot1x mode for a port interface IC 4-81
dot1x operation-mode Allows single or multiple hosts on an dot1x port IC 4-82
dot1x re-authenticate Forces re-authentication on specific ports PE 4-82
dot1x re-authentication Enables re-authentication for all ports GC 4-83
dot1x timeout quiet-period Sets the time that a switch port waits after the Max
Request Count has been exceeded before attempting to
acquire a new client
GC 4-83
dot1x timeout re-authperiod Sets the time period after which a connected client must
be re-authenticated
GC 4-84
dot1x timeout tx-period Sets the time period during an authentication session that
the switch waits before re-transmitting an EAP packet
GC 4-84
show dot1x Shows all dot1x related information PE 4-85