LG-Ericsson iPECS ES-4526G, Руководство пользователя

Страница: 763 / 1328

C
HAPTER
29
| Authentication Commands
802.1X Port Authentication
– 763 –
ES-4500G Series
■
Operation Mode– Shows if single or multiple hosts (clients) can
connect to an 802.1X-authorized port.
■
Port Control–Shows the dot1x mode on a port as auto, force-
authorized, or force-unauthorized ( page 758 ).
■
Intrusion Action– Sets the port response to intrusion when
authentication fails ( page 755 ).
■
Supplicant– MAC address of authorized client.
◆
Authenticator PAE State Machine
■
State – Current state (including initialize, disconnected, connecting,
authenticating, authenticated, aborting, held, force_authorized,
force_unauthorized).
■
Reauth Count– Number of times connecting state is re-entered.
■
Current Identifier– The integer (0-255) used by the Authenticator to
identify the current authentication session.
◆ Backend State Machine
■
State – Current state (including request, response, success, fail,
timeout, idle, initialize).
■
Request Count– Number of EAP Request packets sent to the
Supplicant without receiving a response.
■
Identifier (Server)– Identifier carried in the most recent EAP
Success, Failure or Request packet received from the Authentication
Server.
◆ Reauthentication State Machine
State – Current state (including initialize, reauthenticate).
E
XAMPLE
Console#show dot1x
Global 802.1X Parameters
System Auth Control : Enabled
Authenticator Parameters:
EAPOL Pass Through : Disabled
802.1X Port Summary
Port Type Operation Mode Control Mode Authorized
-------- ------------- -------------- ------------------ ----------
1/1 Disabled Single-Host ForceAuthorized N/A
1/2 Disabled Single-Host ForceAuthorized N/A
.
.
.
1/25 Disabled Single-Host ForceAuthorized Yes
1/26 Enabled Single-Host Auto Yes
802.1X Port Details
802.1X Authenticator is enabled on port 1/1
.
.
.
802.1X Authenticator is enabled on port 26
Reauthentication : Enabled
Reauth Period : 3600