Configuring Port-Based and Client-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
[reauth-period < 0 - 9999999 >]
Sets the period of time after which clients connected
must be re-authenticated. When the timeout is set to 0
the reauthentication is disabled (Default: 0 second)
[unauth-vid < vlan-id >]
Configures an existing static VLAN to be the Unautho-
rized-Client VLAN. This enables you to provide a path
for clients without supplicant software to download the
software and begin an authentication session. Refer to
“802.1X Open VLAN Mode” on page 10-24.
aaa port-access authenticator < port-list >
[logoff-period]< 1 - 999999999 >
Configures the period of time the switch waits for
client activity before removing an inactive client from
the port. (Default: 300 seconds)
[unauth-period < 0-255 >]
Specifies a delay in seconds for placing a port on the
Unauthorized-Client VLAN. This delay allows more
time for a client with 802.1X supplicant capability to
initiate an authentication session. If a connected cli-
ent does not initiate a session before the timer expires,
the port is assigned to the Unauthenticated-Client
VLAN. (Default: 0 seconds)
[auth-vid < vid >]
Configures an existing, static VLAN to be the Autho-
rized-Client VLAN. Refer to “802.1X Open VLAN Mode”
on page 10-24.
3. Configure the 802.1X Authentication Method
This task specifies how the switch authenticates the credentials provided by
a supplicant connected to a switch port configured as an 802.1X authenticator.
Syntax: aaa authentication port-access < local | eap-radius | chap-radius >
Determines the type of RADIUS authentication to use.
local Use the switch’s local username and password for
supplicant authentication.
—Continued—
10-21
To Next Page
Loading...
