Interface Configuration
7750 SR Interface Configuration Guide Page 425
802.1x Port Commands
max-auth-req
Syntax max-auth-req max-auth-request
Context config>port>ethernet>dot1x
Description This command configures the maximum number of times that the 7750 SR will send an access request
RADIUS message to the RADIUS server. If a reply is not received from the RADIUS server after the speci-
fied number attempts, the 802.1x authentication procedure is considered to have failed.
The no form of this command returns the value to the default.
Default 2
Parameters max-auth-request — The maximum number of RADIUS retries.
Values 1 — 10
port-control
Syntax port-control [auto | force-auth | force-unauth]
Context config>port>ethernet>dot1x
Description This command configures the 802.1x authentication mode.
The no form of this command returns the value to the default.
Default force-auth
Parameters force-auth — Disables 802.1x authentication and causes the port to transition to the authorized state with-
out requiring any authentication exchange. The port transmits and receives normal traffic without
requiring 802.1x-based host authentication.
force-unauth — Causes the port to remain in the unauthorized state, ignoring all attempts by the hosts to
authenticate. The switch cannot provide authentication services to the host through the interface.
auto — Enables 802.1x authentication. The port starts in the unauthorized state, allowing only EAPOL
frames to be sent and received through the port. Both the 7750 SR and the host can initiate an authenti-
cation procedure. The port will remain in un-authorized state (no traffic except EAPOL frames is
allowed) until the first client is authenticated successfully. After this, traffic is allowed on the port for all
connected hosts.
To Next Page
Loading...
