set dot1x auth-config
SecureStack C2 Configuration Guide 23-15
set dot1x auth-config
Usethiscommandtoconfigure802.1Xauthentication.
Syntax
set dot1x auth-config {[authcontrolled-portcontrol {auto | forced-auth |
forced-unauth}] [maxreq value] [quietperiod value] [reauthenabled {false | true}]
[reauthperiod value] [servertimeout timeout] [supptimeout timeout] [txperiod
value]} [port-string]
Parameters
Defaults
Ifport‐stringisnotspecified,authenticationparameterswillbesetonallports.
Mode
Switchcommand,read‐write.
authcontrolled‐
portcontrol
auto|forced‐auth|
forced‐unauth
Specifiesthe802.1Xportcontrolmode.
• auto–Setportcontrolmodetoauto controlledportcontrol.This
isthedefaultvalue.
• forced‐auth–SetportcontrolmodetoForcedAuthorized
controlledportcontrol.
• forced‐unauth–Setport
controlmodetoForcedUnauthorized
controlledportcontrol.
maxreqvalue Specifiesthemaximumnumberofauthenticationrequestsallowed
bythebackendauthenticationstatemachine.Validvaluesare1–10.
Defaultvalueis2.
quietperiodvalue Specifiesthetime(inseconds)followingafailedauthentication
beforeanotherattemptcanbemadebythe
authenticatorPAEstate
machine.Validvaluesare 0–65535.Defaultvalueis60seconds.
reauthenabledfalse|
true
Enables(true)ordisables(false)reauthenticationcontrolofthe
reauthenticationtimerstatemachine.Defaultvalueisfal se.
reauthperiodvalue Specifiesthetimelapse(inseconds)betweenattemptsbythe
reauthenticationtimer
statemachinetoreauthenticateaport.Valid
valuesare0–65535.Defaultvalueis3600seconds.
servertimeouttimeout Specifiesatimeoutperiod(inseconds)fortheauthenticationserver,
usedbythebackendauthenticationstatemachine.Validvaluesare1
–300.Defaultvalueis30seconds.
supptimeouttimeout Specifies a
timeoutperiod(inseconds)fortheauthentication
supplicantusedbythebackendauthenticationstatemachine.Valid
valuesare1–300.Defaultvalueis30seconds.
txperiodvalue Specifiestheperiod(inseconds)whichpassesbetweenauthentica tor
PAEstatemachineEAPtransmissions.Validvaluesare0–65535.
Defaultvalue
is30seconds.
port‐string (Optional)Limitstheconfigurationofdesiredsettingstospecified
port(s).Foradetaileddescriptionofpossibleport‐stringvalues,refer
to“PortStringSyntaxUsedintheCLI”onpage 7‐2.