Juniper JUNOS OS 10.3 - SOFTWARE, Руководство пользователя

Страница: 2854 / 3946

Table 351: show dot1x Output Fields (continued)
Level of Output Field Description Field Name
brief , detail The 802.1X authentication role of the interface. When 802.1X is enabled on an
interface, the role is
Authenticator . As Authenticator , the interface blocks LAN
access until a supplicant is authenticated through 802.1X or MAC RADIUS
authentication.
Role
brief
The state of the port:
• Authenticated —The supplicant has been authenticated through the RADIUS
server or has been permitted access through server fail fallback.
•
Authenticating —The supplicant is authenticating through the RADIUS server.
•
Held
—An action has been triggered through server fail fallback during a
RADIUS server timeout. A supplicant is denied access, permitted access
through a specified VLAN, or maintains the authenticated state granted to
it before the RADIUS server timeout occurred.
State
detail The administrative state of the port:
•
auto
—Traffic is allowed through the port based on the authentication result.
(Default)
• force-authorize —All traffic flows through the port irrespective of the
authentication result. This state is not allowed on an interface whose VLAN
membership has been set to
dynamic
.
• force-unauthorize —All traffic drops on the port irrespective of the
authentication result. This state is not allowed on an interface whose VLAN
membership has been set to
dynamic
.
Administrative state
detail
The mode for the supplicant:
•
single
—Authenticates only the first supplicant. All other supplicants who
connect later to the port are allowed full access without any further
authentication. They effectively “piggyback” on the first supplicant’s
authentication.
• single-secure —Allows only one supplicant to connect to the port. No other
supplicant is allowed to connect until the first supplicant logs out.
•
multiple
—Allows multiple supplicants to connect to the port. Each supplicant
is authenticated individually.
Supplicant
detail The number of seconds the port remains in the wait state following a failed
authentication exchange with the supplicant before reattempting the
authentication. The default value is 60 seconds. The range is 0 through 65,535
seconds. Quiet period
detail
The number of seconds the port waits before retransmitting the initial EAPOL
PDUs to the supplicant. The default value is 30 seconds. The range is 1 through
65,535 seconds.
Transmit period
detail
MAC RADIUS authentication:
• enabled —The switch sends an EAPOL request to the connecting host to
attempt 802.1X authentication and if the connecting host is unresponsive,
the switch tries to authenticate using the MAC address.
•
disabled
—The default. The switch will not attempt to authenticate the MAC
address of the connecting host.
MAC radius
Copyright © 2010, Juniper Networks, Inc. 2758
Complete Software Guide for Junos
®
OS for EX Series Ethernet Switches, Release 10.3