32
transparent Transparent 802.1x packets
dot1x authcount x command is used to set max count for re-authentication
request in the re-authentication process. If the max count is met, it will become
un-authentication state. The valid value of “x” is 1~10.
dot1x dynamic-vlan command is used to enable Dynamic VLAN function for
802.1x operation. If it is enabled, the switch will assign the user to the VLAN
assigned from RADIUS server. And no dot1x dynamic-vlan command can be
used to disable it.
dot1x guest-vlan x command is used to enable and select the VLAN for users
fail to authenticated by RADIUS server. “x” is the VLAN ID. And no dot1x
guest-vlan command can be used to disable it.
dot1x max-req x command is used to set max request timeout count between
the switch and RADIUS server before authentication fail. The valid value of “x”
is 1~10.
dot1x re-authentication command is used to force re-authentication on all
ports.
dot1x system-auth-control command is used to enable 802.1x function on the
switch. And no dot1x system-auth-control command can be used to disable
it.
dot1x timeout ... command is used to setup timeout values in 802.1x operation.
Entering “dot1x timeout ?”, the sub-command will be shown.
(config)# dot1x timeout ?
quiet-period Time after Max Request Count before gets new client
re-authperiod Time after connected client must be re-authenticated
server-period Time after an authenticator sends a RADIUS Access-
Request packet to the authentication server
supplicant-period Time after an authenticator sends an EAP-Request/ MD5
Challenge frame to a supplicant
tx-period Time switch waits before re-transmitting EAP packet
dot1x timeout quiet-period x command is used to set the quiet time value
between the switch and the user before next authentication process when
authentication fail. The valid value of “x” is 0~65535.
dot1x timeout re-authperiod x command is used to set the timeout period
for doing re-authentication process. The valid value of “x” is 0~65535.
dot1x timeout server-period x command is used to set the request timeout
value between the switch and RADIUS server. The valid value of “x” is
0~65535.
dot1x timeout supplicant-period x command is used to set the timeout
value between the switch and users (called “supplicant” in 802.1x) after first
identification. The valid value of “x” is 0~65535.
dot1x timeout tx-period x command is used to set the timeout value for the
identification request from the switch to users. The request will be re-tried
until the authcount is met. After that, authentication fail message will be sent.
The valid value of “x” is 0~65535.