Command Reference Guide

Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 103
802.1x Global configuration
The global 802.1x commands allow you to configure parameters that affect all ports in the switch. The
following table describes the 802.1x Global Configuration commands.
Table 103 802.1x Global Configuration commands
Command
Description
dot1x mode {[force-unauthorized|
auto|force-authorized]}
Sets the type of access control for all ports:
force-unauth : the port is unauthorized unconditionally.
auto : the port is unauthorized until it is successfully
authorized by the RADIUS server.
force-auth : the port is authorized unconditionally,
allowing all traffic.
The default value is force-auth.
Command mode: Global configuration
dot1x quiet-time <0-65535>
Sets the time, in seconds, the authenticator waits before
transmitting an EAP-Request/ Identity frame to the supplicant
(client) after an authentication failure in the previous round of
authentication. The default value is 60 seconds.
Command mode: Global configuration
dot1x transmit-interval
<1-65535>
Sets the time, in seconds, the authenticator waits for an EAP-
Response/Identity frame from the supplicant (client) before
retransmitting an EAP-Request/Identity frame. The default value
is 30 seconds.
Command mode: Global configuration
dot1x supplicant-timeout
<1-65535>
Sets the time, in seconds, the authenticator waits for an EAP-
Response packet from the supplicant (client) before
retransmitting the EAP-Request packet to the authentication
server. The default value is 30 seconds.
Command mode: Global configuration
dot1x server-timeout <1-65535>
Sets the time, in seconds, the authenticator waits for a response
from the Radius server before declaring an authentication
timeout. The default value is 30 seconds.
The time interval between transmissions of the RADIUS Access-
Request packet containing the supplicant's (client's) EAP-
Response packet is determined by the current setting of radius-
server timeout (default is 3 seconds).
Command mode: Global configuration
dot1x max-request <1-10>
Sets the maximum number of times the authenticator retransmits
an EAP-Request packet to the supplicant (client). The default
value is 2.
Command mode: Global configuration
dot1x re-authentication-interval
<1-604800>
Sets the time, in seconds, the authenticator waits before re-
authenticating a supplicant (client) when periodic re-
authentication is enabled. The default value is 3600 seconds.
Command mode: Global configuration
[no] dot1x re-authenticate
Sets the re-authentication status to on or off. The default value
is off.
Command mode: Global configuration
default dot1x
Resets the global 802.1x parameters to their default values.
Command mode: Global configuration
show dot1x
Displays current global 802.1x parameters.
Command mode: All