Enterasys SecureStack C2, Руководство по настройке, Страница: 541 / 607

set eapol
SecureStack C2 Configuration Guide 18-17
set eapol
Use this command to enable or disable EAPOL port ‐ based user authentication with the RADIUS
server and to set the authentication mode for one or more ports.
Syntax
set eapol [ enable | disable ] [ auth-mode { auto | forced-auth | forced-unauth }
port-string
Authentication State Current EAPOL authentication state for each port. Possible internal states for the
authenticator (switch) are:
• initialize : A port is in the initialize state when:
– authentication is disabled,
– authentication is enabled and the port is not linked, or
– authentication is enabled and the port is linked. (In this case very
little time is spent in this state, it immediately transitions to the
connecting state, via disconnected.
• disconnected : The port passes through this state on its way to connected
whenever the port is reinitialized, via link state change, reauthentication failure, or
management intervention.
• connecting : While in this state, the authenticator sends request/ID messages to
the end user.
• authenticating : The port enters this state from connecting after receiving a
response/ID from the end user. It remains in this state until the entire
authentication exchange between the end user and the authentication server
completes.
• authenticated : The port enters this state from authenticating state after the
exchange completes with a favorable result. It remains in this state until linkdown,
logoff, or until a reauthentication begins.
• aborting : The port enters this state from authenticating when any event occurs
that interrupts the login exchange.
• held : After any login failure the port remains in this state for the number of
seconds equal to quietPeriod (can be set using MIB).
• forceAuth : Management is allowing normal, unsecured switching on this port.
• forceUnauth : Management is preventing any frames from being forwarded to or
from this port.
Authentication Mode Mode enabling network access for each port. Modes include:
• Auto : Frames are forwarded according to the authentication state of each port.
• Forced Authorized Mode : Meant to disable authentication on a port. It is
intended for ports that support ISLs and devices that cannot authenticate, such
as printers and file servers. If a default policy is applied to the port via the policy
profile MIB, then frames are forwarded according to the configuration set by that
policy, otherwise frames are forwarded according to the current configuration for
that port. Authentication using 802.1X is not possible on a port in this mode.
• Forced Unauthorized Mode : All frames received on the port are discarded by a
filter. Authentication using 802.1X is not possible on a port in this mode.
Table 18-2 show eapol Output Details (Continued)
Output What It Displays...