C
HAPTER
15
| Security Commands
Network Access Server Commands
– 356 –
Reauth. : Disabled
Reauth. Period : 3600
EAPOL Timeout : 30
Age Period : 300
Hold Time : 10
RADIUS QoS : Disabled
RADIUS VLAN : Disabled
Guest VLAN : Disabled
Guest VLAN ID : 1
Max. Reauth Count: 2
Allow Guest VLAN if EAPOL Frame Seen: Disabled
Port Admin State Port State Last Source Last ID
---- ------------------ --------------------- ----------------- -----------
1 Force Authorized Globally Disabled - -
Security/Network/Limit>
security network
nas mode
This command enables or disables 802.1X and MAC-based authentication
globally on the switch.
SYNTAX
security network nas mode [enable | disable]
enable - Enables 802.1X and MAC-based authentication.
disable - Disables 802.1X and MAC-based authentication.
DEFAULT SETTING
Disabled
COMMAND USAGE
This command configures 802.1X and MAC-based authentication globally
on the switch. If globally disabled, all ports are allowed to forward frames.
EXAMPLE
Security/Network/NAS>mode enable
Security/Network/NAS>
security network
nas state
This command sets a port’s authentication mode.
SYNTAX
security network nas state [port-list] [auto | authorized |
unauthorized | single | multi | macbased]
port-list - A specific port or a range of ports. (Range: 1-28, or all)
auto - Requires a dot1x-aware client to be authorized by the
authentication server. Clients that are not dot1x-aware will be
denied access.
To Next Page
