Configuring Authentication
Fixed Switch Configuration Guide 10-13
macauthentication Globally enables or disables MAC
authentication on a device.
Disabled.
macauthentication port Enables or disables MAC
authentication on a port
Disabled.
MultiAuth idle-timeout Specifies the period length for which
no traffic is received before a MultiAuth
session is set to idle.
300 seconds.
MultiAuth mode Globally sets MultiAuth for this device. strict - authentication limited to 802.1x
for a single user on a port.
MultiAuth port mode Specifies the MultiAuth port mode to
use for the specified port.
auth-opt - Authentication is optional
based upon global and port
configuration.
MultiAuth precedence Specifies the authentication mode to
use when multiple authentication types
are successfully authenticated.
Precedence from high to low: 802.1x,
PWA, MAC.
MultiAuth
session-timeout
Specifies the maximum amount of time
a session can live.
0 - no timeout in effect.
pwa Globally enables or disables PWA
authentication.
Disabled.
pwa enhancedmode Allows a user on an unauthenticated
port to enter any URL in the browser to
access the login page.
Disabled.
radius Enable or disable RADIUS on this
device.
Disabled.
radius accounting Enables or disables RADIUS
accounting for this device.
Disabled.
radius accounting
intervalminimum
Specifies the minimum interval before
sending updates for RADIUS
accounting.
600 seconds.
radius accounting retries Specifies the number of times a switch
will attempt to contact an
authentication server for RADIUS
accounting that is not responding.
2.
radius accounting
timeout
Specifies the amount of time for a
switch to make contact with a RADIUS
server.
5 seconds.
radius accounting
updateinterval
Specifies the minimum interval
between interim updates for RADIUS
accounting.
1800 seconds.
radius retries Specifies the number of times a switch
will try to establish with the
authentication server.
3.
radius timeout Specifies the amount of time a switch
will wait to receive a response from the
authentication server before sending
another request.
20 seconds.
Table 10-1 Default Authentication Parameters (continued)
Parameter Description Default Value