8-45
Configuring Port-Based and Client-Based Access Control (802.1X)
Configuring Switch Ports To Operate As Supplicants for 802.1X Connections to Other Switches
[identity < username >]
Sets the username and password to pass to the authen-
ticator port when a challenge-request packet is received
from the authenticator port in response to an authen-
tication request. If the intended authenticator port is
configured for RADIUS authentication, then < user-
name > and < password > must be the username and
password expected by the RADIUS server. If the
intended authenticator port is configured for Local
authentication, then < username > and < password >
must be the username and password configured on the
Authenticator switch. (Defaults: Null)
[secret]
Enter secret: < password >
Repeat secret: < password >
Sets the secret password to be used by the port suppli-
cant when an MD5 authentication request is received
from an authenticator. The switch prompts you to enter
the secret password after the command is invoked.
aaa port-access supplicant [ethernet] < port-list >
[auth-timeout < 1 - 300 >]
Sets the period of time the port waits to receive a
challenge from the authenticator. If the request times
out, the port sends another authentication request, up
to the number of attempts specified by the max-start
parameter. (Default: 30 seconds).
[max-start < 1 - 10 >]
Defines the maximum number of times the supplicant
port requests authentication. See step 1 on page 8-43
for a description of how the port reacts to the authen-
ticator response. (Default: 3).
[held-period < 0 - 65535 >]
Sets the time period the supplicant port waits after an
active 802.1X session fails before trying to re- acquire
the authenticator port. (Default: 60 seconds)
To Next Page
Loading...
Need help?
General
