Configuring Port-Based and Client-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
aaa port-access authenticator < port-list > (Syntax Continued)
[max-requests < 1 - 10 >]
Sets the number of authentication attempts that must
time-out before authentication fails and the authenti
-
cation session ends. If you are using the Local authen-
tication option, or are using RADIUS authentication
with only one host server, the switch will not start
another session until a client tries a new access
attempt. If you are using RADIUS authentication with
two or three host servers, the switch will open a session
with each server, in turn, until authentication occurs
or there are no more servers to try. During the quiet-
period (previous page), if any, you cannot reconfigure
this parameter. (Default: 2)
[reauth-period < 1 - 9999999 >]
Sets the period of time after which clients connected
must be re-authenticated. When the timeout is set to 0
the reauthentication is disabled (Default: 0 second)
[unauth-vid < vlan-id >]
Configures an existing static VLAN to be the Unautho-
rized-Client VLAN. This enables you to provide a path
for clients without supplicant software to download the
software and begin an authentication session. Refer to
“802.1X Open VLAN Mode” on page 10-21.
[auth-vid < vid >]
Configures an existing, static VLAN to be the Autho-
rized-Client VLAN. Refer to “802.1X Open VLAN Mode”
on page 10-21.
[initialize]
On the specified ports, blocks inbound and outbound
traffic and restarts the 802.1X authentication process.
This happens only on ports configured with control auto
and actively operating as 802.1X authenticators.
— Continued —
aaa port-access authenticator < port-list > (Syntax Continued)
10-18
To Next Page
Loading...
Need help?
General