beautypg.com

SMC Networks SMC Tiger 10/100 SMC6128PL2 User Manual

Page 426

background image

Command Line Interface

4-118

4

Command Usage

This command displays the following information:

Global 802.1X Parameters – Shows whether or not 802.1X port

authentication is globally enabled on the switch.

802.1X Port Summary – Displays the port access control parameters for

each interface, including the following items:
- Status

– Administrative state for port access control.

- Operation Mode

– Dot1x port control operation mode (page 4-114).

- Mode

– Dot1x port control mode (page 4-113).

- Authorized

– Authorization status (yes or n/a - not authorized).

802.1X Port Details – Displays the port access control parameters for each

interface, including the following items:
- reauth-enabled

– Periodic re-authentication (page 4-115).

- reauth-period

– Time after which a connected client must be

re-authenticated (page 4-116).

- quiet-period

– Time a port waits after Max Request Count is

exceeded before attempting to acquire a new
client (page 4-115).

- tx-period

– Time a port waits during authentication session

before re-transmitting EAP packet (page 4-116).

- supplicant-timeout

– Supplicant timeout.

- server-timeout

– Server timeout.

- reauth-max

– Maximum number of reauthentication attempts.

- max-req

– Maximum number of times a port will retransmit

an EAP request/identity packet to the client
before it times out the authentication session
(page 4-113).

- Status

– Authorization status (authorized or not).

- Operation Mode

– Shows if single or multiple hosts (clients) can

connect to an 802.1X-authorized port.

- Max Count

– The maximum number of hosts allowed to

access this port (page 4-114).

- Port-control

– Shows the dot1x mode on a port as auto,

force-authorized, or force-unauthorized
(page 4-113).

- Supplicant

– MAC address of authorized client.

- Current Identifier

– The integer (0-255) used by the Authenticator to

identify the current authentication session.

- Intrusion action

– Shows whether the switch will block all non-EAP

traffic or assign traffic on the port to a guest
VLAN if authentication fails.

Authenticator State Machine

- State

– Current state (including initialize, disconnected,

connecting, authenticating, authenticated, aborting,
held, force_authorized, force_unauthorized).