Reference Guide 784 Document #: LTRT-17939
Mediant MSBR
76.8 802.1x LAN Port-based Authentication Commands
The 802.1x commands provide the support for functioning as an IEEE 802.1X authenticator.
IEEE 802.1X (EAP-over-LAN, or EAPOL) is a standard for port-level security on secure
Ethernet switches (wired or wireless). When equipment is connected to a secure port, no
traffic is allowed until the identity of the equipment is authenticated.
76.8.1 dot.1x lan-authentication enable
This command enables 802.1X LAN port authentication. The no version of this command
disables the command.
Syntax
dot1x lan-authentication enable
no dot1x lan-authentication enable
Command Mode
Privileged User
Example
This example enables 802.1 X LAN port authentication.
(config-data)# dot1x lan-authentication enable
76.8.2 dot1x radius-server
This command defines the RADIUS server for 802.1X authentication.
Syntax
dot1x radius-server host <a.b.c.d> auth-port <UDP port> key
<shared secret value>
dot1x radius-server host <a.b.c.d> auth-port <UDP port> obscured-
key <shared secret value>
dot1x radius-server local
Command Description
a.b.c.d Defines the RADIUS server IP address.
UDP port Defines the UDP port to use.
shared secret value Defines the shared secret value string.
key Defines a shared secret.
obscured-key Copies a shared secret from existing configuration.
Command Mode
Privileged User