N8406-023 1Gb Intelligent L3 Switch Command Reference Guide (ISCLI) 103
802.1x Port configuration
The 802.1x port commands allow you to configure parameters that affect the selected port in the switch. These
settings override the global 802.1x parameters.
The following table describes the 802.1x Port Configuration commands.
Table 104 802.1x Port Configuration commands
Command
Description
dot1x mode {[force-unauthorized|
auto|force-authorized]}
Sets the type of access control for the port:
force-unauth
- the port is unauthorized unconditionally.
auto
- the port is unauthorized until it is successfully authorized
by the RADIUS server.
force-auth
- the port is authorized unconditionally, allowing all
traffic.
The default value is
force-auth
.
Command mode
: Interface port
dot1x quiet-time <
0-65535
>
Sets the time, in seconds, the authenticator waits before transmitting
an EAP-Request/ Identity frame to the supplicant (client) after an
authentication failure in the previous round of authentication. The
default value is 60 seconds.
Command mode
: Interface port
dot1x transmit-interval
<
1-65535
>
Sets the time, in seconds, the authenticator waits for an EAP-
Response/Identity frame from the supplicant (client) before
retransmitting an EAP-Request/Identity frame. The default value is 30
seconds.
Command mode:
Interface port
dot1x supplicant-timeout
<
1-65535
>
Sets the time, in seconds, the authenticator waits for an EAP-
Response packet from the supplicant (client) before retransmitting the
EAP-Request packet to the authentication server. The default value is
30 seconds.
Command mode
: Interface port
dot1x server-timeout <
1-65535
>
Sets the time, in seconds, the authenticator waits for a response from
the RADIUS server before declaring an authentication timeout. The
default value is 30 seconds.
Command mode
: Interface port
dot1x max-request <
1-10
>
Sets the maximum number of times the authenticator retransmits an
EAP-Request packet to the supplicant (client). The default value is 2.
Command mode
: Interface port
dot1x re-authentication-interval
<
1-604800
>
Sets the time, in seconds, the authenticator waits before re-
authenticating a supplicant (client) when periodic re-authentication is
enabled. The default value is 3600 seconds.
Command mode:
Interface port
[no] dot1x re-authenticate
Sets the re-authentication status to
on
or
off
. The default value is
off
.
Command mode
: Interface port
default dot1x
Resets the global 802.1x parameters to their default values.
Command mode
: Interface port
show dot1x
Displays current global 802.1x parameters.
Command mode
: All