C
HAPTER
24
| Authentication Commands
802.1X Port Authentication
– 861 –
◆ Supplicant Parameters – Shows the supplicant user name used when
the switch responds to an MD5 challenge from an authenticator
(page 857).
◆ 802.1X Port Summary – Displays the port access control parameters
for each interface that has enabled 802.1X, including the following
items:
â–
Type – Administrative state for port access control (Enabled,
Authenticator, or Supplicant).
â–
Operation Mode – Allows single or multiple hosts (page 852).
â–
Control Mode – Dot1x port control mode (page 853).
â–
Authorized – Authorization status (yes or n/a - not authorized).
◆ 802.1X Port Details – Displays the port access control parameters for
each interface, including the following items:
â–
Reauthentication – Periodic re-authentication (page 853).
â–
Reauth Period – Time after which a connected client must be re-
authenticated (page 854).
â–
Quiet Period – Time a port waits after Max Request Count is
exceeded before attempting to acquire a new client (page 854).
â–
TX Period – Time a port waits during authentication session before
re-transmitting EAP packet (page 856).
â–
Supplicant Timeout – Supplicant timeout.
â–
Server Timeout – Server timeout. A RADIUS server must be set
before the correct operational value of 10 seconds will be displayed
in this field.
â–
Reauth Max Retries – Maximum number of reauthentication
attempts.
â–
Max Request – Maximum number of times a port will retransmit an
EAP request/identity packet to the client before it times out the
authentication session (page 851).
â–
Operation Mode– Shows if single or multiple hosts (clients) can
connect to an 802.1X-authorized port.
â–
Port Control–Shows the dot1x mode on a port as auto, force-
authorized, or force-unauthorized (page 853).
â–
Intrusion Action– Shows the port response to intrusion when
authentication fails (page 850).
â–
Supplicant– MAC address of authorized client.
â—† Authenticator PAE State Machine
â–
State – Current state (including initialize, disconnected,
connecting,
authenticating, authenticated, aborting,
held, force_authorized,
force_unauthorized).
â–
Reauth Count– Number of times connecting state is re-entered.
â–
Current Identifier– The integer (0-255) used by the Authenticator to
identify the current authentication session.
â—† Backend State Machine
â–
State – Current state (including request, response, success, fail,
timeout, idle, initialize).