Users Guide

340 Authentication, Authorization, and Accounting
Configuring 802.1X Settings for RADIUS-Assigned VLANs
Use the following commands to configure 802.1X settings that affect the
RADIUS-assigned VLAN.
dot1x max-req count Set the maximum number of times that the switch sends
an Extensible Authentication Protocol (EAP)-request
frame (assuming that no response is received) other than
Request-Identity to the client before restarting the
authentication process.
dot1x max-reauth-req
count
Set the maximum number of times that the switch sends
an Extensible Authentication Protocol (EAP)-Request
Identify frame to client with no response before restarting
the authentication process.
authentication max-
users users
Set the maximum number of clients supported on the port
when 802.1X authentication is enabled on the port.
CTRL + Z Exit to Privileged Exec mode.
clear authentication
sessions [interface]
Start the initialization sequence on all ports or on the
specified port.
NOTE: This command is valid only if the port-control mode
for the specified port is auto.
show authentication
[interface interface]
View the authentication settings for the switch or for the
specified interface.
show dot1x statistics
interface-id
View 802.1X statistics for the specified interface.
Command Purpose
configure Enter Global Configuration mode.
aaa authorization
network default radius
Allow the RADIUS server to assign VLAN IDs to clients.
authentication dynamic-
vlan enable
If the RADIUS assigned VLAN does not exist on the
switch, allow the switch to dynamically create the assigned
VLAN.
Command Purpose