Asus GigaX2024SX - Manual (Page 74)

switch.and click Apply.
Figure 3-31. 802.1x Configuration
CLI – This example enables 802.1x globally for the switch.
C
W
the parameters for the
au t and the switch (i.e.,
au s that runs between the
sw
C
•
•
D
•
80
•
t when
the Multi-Host operation mode is selected. (Range: 1-20; Default: 5)
•
-
val specified by
mber of times the switch port will retransmit an
EAP request packet to the client before
ange: 1-10; Defau
he Max Request
client. (Range:
1-65535 seconds; Default: 60 seconds)
• Re-authen Period – Sets the time period after which a connected client must be
onfiguring Port Settings for 802.1x
hen 802.1x is enabled, you need to configure
thentication process that runs between the clien
thenticator), as well as the client identity lookup proces
itch and authentication server. These parameters are described in this section.
ommand Attributes
Port – Port number.
Status – Indicates if authentication is enabled or disabled on the port. (Default:
isabled)
Operation Mode – Allows single or multiple hosts (clients) to connect to an
2.1X-authorized port. (Options: Single-Host, Multi-Host; Default: Single-Host)
Max Count – The maximum number of hosts that can connect to a por
Mode – Sets the authentication mode to one of the following options:
Auto – Requires a dot1x-aware client to be authorized by the authentication
rver. Clients that are not dot1x-aware will b se e denied access.
- Force-Authorized – Forces the port to grant access to all clients, either
dot1x-aware or otherwise. (This is the default setting.)
- Force-Unauthorized – Forces the port to deny access to all clients, either
dot1x-aware or otherwise.
• Re-authen – Sets the client to be re-authenticated after the inter
the Re-authentication Period. Re-authentication can be used to detect if a new
device is plugged into a switch port. (Default: Disabled)
• Max-Req – Sets the maximum nu
it times out the authentication session.
lt 2) (R
• Quiet Period – Sets the time that a switch port waits after t
Count has been exceeded before attempting to acquire a new
3-49