Configuring port authorization mode – Alcatel Carrier Internetworking Solutions OmniStack 6300-24 User Manual
Page 98

Configuring the Switch
3-58
3
CLI – This enables re-authentication and sets all of the global parameters for 802.1x.
Configuring Port Authorization Mode
When dot1x is enabled, you need to specify the dot1x authentication mode
configured for each port.
Command Attributes
• Status – Indicates if authentication is enabled or disabled on the port.
• Operation Mode – Allows single or multiple hosts (clients) to connect to an
802.1X-authorized port. (Range: Single-Host, Multi-Host; Default: Single-Host)
• Max Count – The maximum number of hosts that can connect to a port when the
Multi-Host operation mode is selected. (Range: 1-20; Default: 5)
• Mode – Sets the authentication mode to one of the following options:
- Auto – Requires a dot1x-aware client to be authorized by the authentication
server. Clients that are not dot1x-aware will be denied access.
- Force-Authorized – Forces the port to grant access to all clients, either
dot1x-aware or otherwise.
- Force-Unauthorized – Forces the port to deny access to all clients, either
dot1x-aware or otherwise.
• Authorized –
- Yes – Connected client is authorized.
- No – Connected client is not authorized.
- Blank – Displays nothing when dot1x is disabled on a port.
• Supplicant – Indicates the MAC address of a connected client.
• Trunk – Indicates if the port is configured as a trunk port.
Console(config)#dot1x re-authentication
Console(config)#dot1x max-req 5
Console(config)#dot1x timeout quiet-period 40
Console(config)#dot1x timeout re-auth 5
Console(config)#dot1x timeout tx-period 40
Console(config)#authentication dot1x default radius
Console(config)#