beautypg.com

At8404 switching commands – Kontron AT8404 CLI User Manual

Page 85

background image

AT8404

Switching Commands

Page 2 - 49

AT8404 CLI Reference Manual

If you use the optional parameter summary { | all}, the dot1x configuration for the specified port
or all ports are displayed.

If you use the optional parameter 'detail >', the detailed dot1x configuration for the specified port is
displayed.

VLAN Assignment

Mode

Indicates whether assignment of an authorized port to a RADIUS assigned VLAN is allowed

(enabled) or not (disabled).

Term

Definition

Interface

The interface whose configuration is displayed.

Control Mode

The configured control mode for this port. Possible values are force-unauthorized | force-

authorized | auto | authorized | unauthorized.

Operating Control

Mode

The control mode under which this port is operating. Possible values are authorized |

unauthorized.

Reauthentication

Enabled

Indicates whether re-authentication is enabled on this port.

Port Status

Indicates whether the port is authorized or unauthorized. Possible values are authorized |

unauthorized.

Term

Definition

Port

The interface whose configuration is displayed.

Protocol Version

The protocol version associated with this port. The only possible value is 1, corresponding to

the first version of the dot1x specification.

PAE Capabilities

The port access entity (PAE) functionality of this port. Possible values are Authenticator or

Supplicant.

Authenticator PAE

State

Current state of the authenticator PAE state machine. Possible values are Initialize,

Disconnected, Connecting, Authenticating, Authenticated, Aborting, Held, ForceAuthorized,

and ForceUnauthorized.

Backend

Authentication

State

Current state of the backend authentication state machine. Possible values are Request,

Response, Success, Fail, Timeout, Idle, and Initialize.

Quiet Period

The timer used by the authenticator state machine on this port to define periods of time in

which it will not attempt to acquire a supplicant. The value is expressed in seconds and will

be in the range 0 and 65535.

Transmit Period

The timer used by the authenticator state machine on the specified port to determine when to

send an EAPOL EAP Request/Identity frame to the supplicant. The value is expressed in

seconds and will be in the range of 1 and 65535.

Guest-VLAN ID

The guest VLAN identifier configured on the interface.

Guest-Vlan

Operational Mode

Indicates whether guest-vlan operational mode is enabled or disabled.

Supplicant

Timeout

The timer used by the authenticator state machine on this port to timeout the supplicant. The

value is expressed in seconds and will be in the range of 1 and 65535.

Server Timeout

The timer used by the authenticator on this port to timeout the authentication server. The

value is expressed in seconds and will be in the range of 1 and 65535.

Maximum

Requests

The maximum number of times the authenticator state machine on this port will retransmit an

EAPOL EAP Request/Identity before timing out the supplicant. The value will be in the range

of 1 and 10.

Vlan-assigned

The VLAN assigned to the port by the radius server.

Term

Definition