Reference Guide

502 | show aaa authentication dot1x Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide
Number of times ID-Requests are
retried
Maximum number of times ID requests are sent to the client.
Maximum Number of Reauthentication
Attempts
Maximum number of reauthentication attempts.
Maximum number of times Held State
can be bypassed
Number of consecutive authentication failures which, when reached,
causes the controller to not respond to authentication requests from a
client while the controller is in a held state after the authentication
failure.
Dynamic WEP Key Message Retry Count Number of times unicast/multicast EAPOL key messages are sent to the
client.
Dynamic WEP Key Size Dynamic WEP key size, either 40 or 128 bits.
Interval between WPA/WPA2 Key
Messages
Interval, in milliseconds, between each WPA key exchange.
Delay between EAP-Success and WPA2
Unicast Key Exchange
Show the delay interval between EAP-Success and unicast key
exchanges, in msec.
Range: 0-2000msec. Default: 0 (no delay).
Delay between WPA/WPA2 Unicast Key
and Group Key Exchange
Interval, in milliseconds, between unicast and multicast key exchanges.
Time interval after which the PMKSA
will be deleted
Show the PMKSA cache interval. Time interval in Hours. Range: 1-2000.
Default: 8 hrs.
WPA/WPA2 Key Message Retry Count Number of times WPA/WPA2 key messages are retried.
Multicast Key Rotation Shows if multicast key rotation is enabled or disabled.
Unicast Key Rotation Shows if unicast key rotation is enabled or disabled.
Reauthentication If enabled, this option forces the client to do a 802.1x reauthentication
after the expiration of the default timer for reauthentication. (The
default value of the timer is 24 hours.)
Opportunistic Key Caching If enabled, a cached pairwise master key (PMK) is derived with a client
and an associated AP and used when the client roams to a new AP.
Validate PMKID Shows if the Validate PMKID feature is enabled or disabled. When this
option is enabled, the client must send a PMKID in the associate or
reassociate frame to indicate that it supports OKC; otherwise, full 802.1x
authentication takes place. (This feature is optional, since most clients
that support OKC do not send the PMKID in their association request.)
Use Session Key If enabled, the controller will use a RADIUS session key as the unicast
WEP key.
Use Static Key If enabled, the controller will use a static key as the unicast/multicast
WEP key.
xSec MTU Shows the size of the MTU for xSec.
Termination Shows if 802.1x termination is enabled or disabled on the controller.
Termination EAP-Type Shows the current Extensible Authentication Protocol (EAP) method,
either EAP-PEAP or EAP-TLS.
Termination Inner EAP-Type When EAP-PEAP is the EAP method, this parameter displays the inner
EAP type.
Enforce Suite-B 128 bit or more
security level Authentication
Shows if Suite-B 128 bit or more security level authentication
enforcement is enabled or disabled.
Parameter Value