Allied Telesis IE340-20GP - aaa authentication dot1 x

C613-50631-01 Rev A Command Reference for IE340 Series 2360
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
AAA COMMANDS
AAA
AUTHENTICATION DOT1X
aaa authentication dot1x
Overview Use this command to enable IEEE 802.1X-based authentication globally and to
allow you to enable either the default authentication method list (in this case, a list
of RADIUS servers), which is automatically applied to every interface running IEEE
802.1X-based authentication, or a user named authentication method list, which is
applied to an interface with the dot1x authentication command.
Use the no variant of this command to disable either the default or a named
method list for 802.1X-based authentication. Once all method lists are disabled
802.1x-based authentication is disabled globally.
Syntax
aaa authentication dot1x {default|<list-name>} group
{<group-name>|radius}
no aaa authentication dot1x {default|<list-name>}
Default 802.1X-based Port Authentication is disabled by default.
Mode Global Configuration
Usage notes This command can be used to configure either the default authentication method
list or a named authentication method list:
• default: the default authentication method list which is automatically
applied to all interfaces with 802.1X-based authentication enabled.
• <list-name>: a user named list which can be applied to an interface using the
aaa authentication dot1x command.
There are two ways to define servers where RADIUS accounting messages are sent:
• group radius: use all RADIUS servers configured by radius-server host
command
• group <group-name>: use the specified RADIUS server group configured
with the aaa group server command
Examples To enable 802.1X-based authentication globally with all RADIUS servers, and use
all available RADIUS servers, use the command:
awplus# configure terminal
awplus(config)# aaa authentication dot1x default group radius
Parameter Description
default Configure the default authentication method list
<list-name> Configure a named authentication method list
group Use a server group
<group-name> Server group name.
radius Use all RADIUS servers.