802.1X Commands
page 44-10 OmniSwitch 6250 CLI Reference Guide November 2009
• IF this command is used without specifying any of the optional policy keywords or a pass/fail parame-
ter (e.g. 802.1x 1/10 supplicant authentication), the resulting policy will block supplicants if success-
ful 802.1x authentication does not return a VLAN ID, returns a VLAN ID that does not exist, or
authentication fails.
• When multiple parameters are configured, the policy is referred to as a compound supplicant policy.
Such policies use the pass and fail parameters to specify which policies to use when 802.1x authentica-
tion is successful and which to use when it fails.
• The pass keyword is implied and therefore an optional keyword. If the fail keyword is not used, the
default action is to block the device when authentication fails.
• The order in which parameters are specified determines the order in which they are applied. However,
this type of policy must end with either the default-vlan or block, or captive-portal parameters,
referred to as terminal parameters (or policies). This applies to both pass and fail policies. If a terminal
parameter is not specified, the block parameter is used by default.
• If the captive-portal parameter is specified with this command, the Captive Portal authentication
policy is applied to supplicant traffic. See the 802.1x captive-portal policy authentication command
page for more information.
• Configuring supplicant classification policies is only supported on 802.1x enabled mobile ports.
• Each 802.1x port can have one supplicant policy and one non-supplicant policy for handling 802.1x
and non-802.1x devices, respectively. Configuring a new supplicant or non-supplicant policy over-
writes any policies that may already exist for the port.
Examples
-> 802.1x 3/1 supplicant policy authentication
-> 802.1x 4/1 supplicant policy authentication vlan 27 default-vlan
-> 802.1x 5/1 supplicant policy authentication group-mobility captive-portal
-> 802.1x 5/10 supplicant policy authentication pass group-mobility default-vlan
fail vlan 43 block
-> 802.1x 6/1 supplicant policy authentication pass group-mobility default-vlan
fail captive-portal
Release History
Release 6.6.1; command was introduced.
To Next Page
Loading...
