Configuration Commands
Page 344 7750 SR OS Interface Configuration Guide
802.1x Port Commands
max-auth-req
Syntax max-auth-req max-auth-request
Context config>port>ethernet>dot1x
Description
This command configures the maximum number of times that the 7750 SR will send an access
request RADIUS message to the RADIUS server. If a reply is not received from the RADIUS server
after the specified number attempts, the 802.1x authentication procedure is considered to have failed.
The no form of this command returns the value to the default.
Default 2
Parameters max-auth-request — The maximum number of RADIUS retries.
Values 1 — 10
port-control
Syntax port-control [auto | force-auth | force-unauth]
Context config>port>ethernet>dot1x
Description This command configures the 802.1x authentication mode.
The no form of this command returns the value to the default.
Default force-auth
Parameters force-auth — Disables 802.1x authentication and causes the port to transition to the authorized state
without requiring any authentication exchange. The port transmits and receives normal traffic
without requiring 802.1x-based host authentication.
force-unauth — Causes the port to remain in the unauthorized state, ignoring all attempts by the
hosts to authenticate. The switch cannot provide authentication services to the host through the
interface.
auto — Enables 802.1x authentication. The port starts in the unauthorized state, allowing only
EAPOL frames to be sent and received through the port. Both the 7750 SR and the host can
initiate an authentication procedure. The port will remain in un-authorized state (no traffic except
EAPOL frames is allowed) until the first client is authenticated successfully. After this, traffic is
allowed on the port for all connected hosts.
To Next Page
Loading...
