Users Guide

View interface running configuration
OS10(conf-range-eth1/1/7-1/1/8)# do show running-configuration interface
...
!
interface ethernet1/1/7
no shutdown
dot1x max-req 5
dot1x re-authentication
dot1x timeout quiet-period 120
dot1x timeout re-authperiod 3600
dot1x timeout server-timeout 60
dot1x timeout supp-timeout 45
dot1x timeout tx-period 120
!
interface ethernet1/1/8
no shutdown
dot1x max-req 5
dot1x re-authentication
dot1x timeout quiet-period 120
dot1x timeout re-authperiod 3600
dot1x timeout server-timeout 60
dot1x timeout supp-timeout 45
dot1x timeout tx-period 120
...
Configure RADIUS server
To configure RADIUS server for 802.1x authentication, use the radius-server host command. Enter the server IP address
or host name, and the shared secret key used to authenticate the OS10 switch on a RADIUS host.
● Configure a RADIUS over TLS authentication on a RADIUS server in CONFIGURATION mode.
radius-server host {hostname | ip-address} key {0 authentication-key | 9
authentication-key | authentication-key} [auth-port port-number]
To configure more than one RADIUS server for 802.1x authentication, re-enter the radius-server host tls command
multiple times. If you configure multiple RADIUS servers, OS10 attempts to connect in the order you configured them. An OS10
switch connects with the configured RADIUS servers one at a time, until a RADIUS server responds with an accept or reject
response. The switch tries to connect with a server for the configured number of retransmit retries and timeout period.
Configure global settings for the timeout and retransmit attempts allowed on RADIUS servers as described in RADIUS
authentication.
Configure RADIUS for 802.1x authentication
OS10(config)# radius-server host 1.5.6.4 key secret1
OS10(config)# radius-server retransmit 10
OS10(config)# radius-server timeout 10
802.1X commands
dot1x host-mode
Allows 802.1X authentication for either a single supplicant or multiple supplicants on an interface.
Syntax
dot1x host-mode {multi-host}
Parameters
● multi-host — Allows attachment of multiple hosts to a single 802.1X-enabled port. You can only
authorize one of the attached clients for all clients to grant network access. If the port becomes
unauthorized (reauthentication fails or receives an EAPOL-logoff message), the device denies network
access to all the attached clients.
Default Multihost
438 Layer 2