Hirschmann GigaLION-24TP - Displaying 802.1 X Global Settings; Figure 3-26. 802.1 X Information

Configuring the Switch
3-44
3
The operation of dot1x on the switch requires the following:
• The switch must have an IP address assigned.
• RADIUS authentication must be enabled on the switch and the IP address of the
RADIUS server specified.
• 802.1X must be enabled globally for the switch.
• Each switch port that will be used must be set to dot1x “Auto” mode.
• Each client that needs to be authenticated must have dot1x client software
installed and properly configured.
• The RADIUS server and 802.1X client support EAP. (The switch only supports
EAPOL in order to pass the EAP packets from the server to the client.)
• The RADIUS server and client also have to support the same EAP authentication
type – MD5. (Some clients have native support in Windows, otherwise the dot1x
client must support it.)
Displaying 802.1x Global Settings
The 802.1X protocol provides port authentication.
Command Attributes
• 802.1X System Authentication Control – The global setting for 802.1X.
Web – Click Security, 802.1x, Information.
Figure 3-26. 802.1x Information
CLI – This example shows the default protocol settings for 802.1x. For a description
of the additional entries displayed in the CLI, See “show dot1x” on page 4-83.
Console#show dot1x 4-85
Global 802.1X Parameters
system-auth-control: enable
802.1X Port Summary
Port Name Status Operation Mode Mode Authorized
1/1 disabled Single-Host ForceAuthorized n/a
1/2 disabled Single-Host ForceAuthorized n/a
.
.
.
802.1X Port Details
802.1X is disabled on port 1/1
.
.
.
802.1X is disabled on port 24
Console#