C
HAPTER
16
| IEEE 802.1X Commands
– 274 –
EXAMPLE
Dot1x>agetime 900
Dot1x>
dot1x holdtime This command displays or sets the hold time before MAC addresses that
failed authentication expire.
SYNTAX
dot1x holdtime [hold-time]
hold-time - The time after an EAP Failure indication or RADIUS
timeout that a client is not allowed access. This setting applies to
ports running MAC-based authentication only. (Range: 10-1000000
seconds)
DEFAULT SETTING
10 seconds
COMMAND USAGE
If the RADIUS server denies a client access, or a RADIUS server request
times out (according to the timeout period specified by the auth timeout
command, page 224), the client is put on hold in the Unauthorized state.
In this state, frames from the client will not cause the switch to attempt to
re-authenticate the client.
EXAMPLE
Dot1x>holdtime 60
Dot1x>
dot1x statistics This command displays IEEE 802.1X statistics and protocol information for
specified ports.
SYNTAX
dot1x statistics [port-list] [clear] [eapol | radius]
port-list - A specific port or a range of ports. (Range: 1-28, or all)
clear - Clears 802.1X statistics
eapol - Shows IEEE 802.1X statistics for a specific switch port
running port-based authentication.
radius - Shows statistics for the RADIUS authentication server
(specified with the auth radius command described on page 225).
DEFAULT SETTING
Displays all statistics for all ports.
To Next Page
Loading...
