Configuration Guide User guide

1814 FastIron Configuration Guide
53-1002494-02
802.1X port security configuration
Setting the wait interval for EAP frame retransmissions
By default, when the Brocade device relays an EAP-Request frame from the RADIUS server to the
Client, it expects to receive a response from the Client within 30 seconds. You can optionally
specify the wait interval using the supptimeout command.
For example, to configure the device to retransmit an EAP-Request frame if the Client does not
respond within 45 seconds, enter the following command.
Brocade(config-dot1x)#supptimeout 45
Syntax: supptimeout <seconds>
<seconds> is a number from 1 – 4294967295 seconds. The default is 30 seconds.
Setting the maximum number of EAP frame retransmissions
You can optionally specify the number of times the Brocade device will retransmit the EAP-request
frame. You can specify between 1 – 10 frame retransmissions. For example, to configure the
device to retransmit an EAP-request frame to a Client a maximum of three times, enter the
following command.
Brocade(config-dot1x)#maxreq 3
Syntax: maxreq <value>
<value> is a number from 1 – 10. The default is 2.
Specifying a timeout for retransmission of messages
to the authentication server
When performing authentication, the Brocade device receives EAPOL frames from the Client and
passes the messages on to the RADIUS server. The device expects a response from the RADIUS
server within 30 seconds. If the RADIUS server does not send a response within 30 seconds, the
Brocade device retransmits the message to the RADIUS server. The time constraint for
retransmission of messages to the Authentication Server can be between 0 – 4294967295
seconds.
For example, to configure the device to retransmit a message if the Authentication Server does not
respond within 45 seconds, enter the following command.
Brocade(config-dot1x)#servertimeout 45
Syntax: servertimeout <seconds>
Initializing 802.1X on a port
To initialize 802.1X port security on a port, enter a command such as the following.
Brocade#dot1x initialize e 3/1
Syntax: dot1x initialize ethernet <port>
Specify the port variable in one of the following formats:
• FWS, FCX, and ICX stackable switches – stack-unit/slotnum/portnum
• FSX 800 and FSX 1600 chassis devices – slotnum/portnum