Brocade Network OS NETCONF Operations Guide v4.1.1 User Manual

Page 510

Advertising

478

Network OS NETCONF Operations Guide

53-1003231-02

Interface-specific administrative tasks for 802.1x

3. Under the <gigabitethernet>, <tengigabitethernet>, <fortygigabitethernet>, or

<hundredgigabitethernet> node, include the <name> leaf element and specify the name of
the interface on which you want to configure 802.1x authentication timers. Specify the
interface in [rbridge-id/]slot/port format.

4. Under the <gigabitethernet>, <tengigabitethernet>, <fortygigabitethernet>, or

<hundredgigabitethernet> node, include the <dot1x> node element from the
urn:brocade.com:mgmt:brocade-dot1x namespace.

5. Under the <dot1x> node, include the <timeout> node element.

6. Under the <timeout> node, include the <re-authperiod>, <server-timeout>, <supp-timeout>, or

<tx-period> leaf element and specify a new timeout value.

7. Issue the <bna-config-cmd> RPC to save the running-config file to the startup-config file.

The following example changes the supplicant timeout value to 40 seconds.

<?xml version="1.0" encoding="UTF-8"?>

<edit-config>

</target>

<supp-timeout>40</supp-timeout>

</timeout>

</dot1x>

</tengigabitethernet>

</interface>

</config>

</edit-config>

</rpc>

<rpc-reply message-id="2404" xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">

<ok/>

</rpc-reply>

Configuring 802.1x re-authentication on interface ports

To configure 802.1x port re-authentication on a specific interface port, perform the following steps.
Repeat this task for each interface port you wish to modify.

The default re-authentication period is 3600 seconds.

1. Issue the <edit-config> RPC to configure the <interface> node in the

urn:brocade.com:mgmt:brocade-interface namespace.

2. Under the <interface> node, specify the <gigabitethernet>, <tengigabitethernet>,

<fortygigabitethernet>, or <hundredgigabitethernet> node element.

NOTE

You cannot configure 802.1x authentication on a port-channel.

Advertising