5-13
Configuring Port-Based Access Control (802.1x)
Configuring Switch Ports as 802.1x Authenticators
3. Configure the 802.1x Authentication Method
This task specifies how the switch will authenticate the credentials provided
by a supplicant connected to a switch port configured as an 802.1x authenti-
cator.
aaa port-access authenticator < port-list > (Syntax Continued)
[ reauth-period < 1 - 9999999 > ]
Sets the period of time after which clients connected
must be re-authenticated. When the timeout is set to 0
the reauthentication is disabled (Default: 0 second)
[ initialize ]
On the specified ports, blocks inbound and outbound
traffic and restarts the 802.1x authentication process.
This behavior occurs only on ports configured with
control auto and actively operating as 802.1x authenti-
cators. Note: If a specified port is configured with
control authorized and port-security, and the port has
learned an authorized address, the port will remove
this address and learn a new one from the first packet
it receives.
[ reauthenticate ]
Forces reauthentication (unless the authenticator is
in 'HELD' state).
[ clear-statistics ]
Clears authenticator statistics counters.
Syntax: aaa authentication port-access < local | eap-radius | chap-radius >
Determines the type of RADIUS authentication to use.
local
Use the switch’s local username and password for sup-
plicant authentication.
eap-radius
Use EAP-RADIUS authentication. (Refer to the docu-
mentation for your RADIUS server.
chap-radius
Use CHAP-RADIUS authentication. (Refer to the docu-
mentation for your RADIUS server application.)
!FishSecurity.book Page 13 Thursday, October 10, 2002 9:19 PM
To Next Page
Loading...
