Dell PowerConnect 5548 User Guide - Page 133

• RADIUS, None - Perform port authentication first by using the RADIUS server. If no response is received from RADIUS (for example, if the server is down), then no authentication is performed, and the session is permitted. • RADIUS - Authenticate the user on the RADIUS server. If no authentication is performed, the session is not permitted. • None - Do not authenticate the user. Permit the session. - Guest VLAN - Enable/disable the use of a Guest VLAN for unauthorized ports. If a Guest VLAN is enabled, all unauthorized ports automatically join the VLAN selected in the Guest VLAN ID field. If a port is later authorized, it is removed from the Guest VLAN. - VLAN List - Select the Guest VLAN from the VLAN list. - Monitoring Mode - Enable/disable logging authentication attempts. - Monitoring VLAN - Enter the ID of the VLAN to which traffic being monitored is routed after unsuccessful Dot1x authentication. - Accept Supplicant when Dynamic Policy/ACL Assignment Has No Resources - If no resources remain in the TCAM, the system can either reject (disable) or allow (enable) successful authentication. Enabling Port-Based Authentication Globally Using the CLI Commands The following table summarizes the CLI commands for enabling the port based authentication as displayed in the Port Based Authentication Global page. Table 8-12. Port-Based Authentication Global CLI Commands CLI Command Description aaa authentication dot1x default method1 [method2] no aaa authentication dot1x default Specifies one or more AAA methods for use on interfaces running IEEE 802.1X. Use the no form of this command to restore the default configuration. dot1x system-auth-control no dot1x system-auth-control Enables 802.1x globally. Use the no form of this command to restore the default configuration. Dell PowerConnect 55xx Systems User Guide 133