D-Link DGS-6600-48TS Configuration Guide - Page 436

Volume 8-Security & Authentication / Chapter 40-802.1X Authentication 802.1X Configuration Commands • Starting the Re-Authentication of Clients • Specifying the Access Control Mode • Specifying the Port Control Direction • Configuring Port Guest VLANs • Specifying the Authentication Protocol • Creating the Local User Table • 802.1X PDU Forwarding • Resetting the Port Level 802.1X Setting to Defaults Enabling Authentication To enable 802.1X authentication on a port, the user needs to enable the global setting, and then enable the authentication on the specific port, by using the commands below: Command dot1x system-auth-control dot1x pae authenticator Explanation Globally enables IEEE 802.1X authentication on the Switch. Specifies that the port will act as an IEEE 802.1X Port Access Entity (PAE) authenticator. In the following example, the user globally enables IEEE 802.1X authentication and specifies that Ethernet interface 4.10 will act as a PAE authenticator: DGS-6600:2>enable DGS-6600:15#configure terminal DGS-6600:15(config)#dot1x system-auth-control DGS-6600:15(config)#interface eth4.10 DGS-6600:15(config-if)#dot1x pae authenticator DGS-6600:15(config-if)#end Specifying the 802.1X Timers and Parameters The following table describes the timers that are used for 802.1x protocol operation: Timer Quiet Period Re-authentication Period Server Timeout Supplicant Timeout Description The number of seconds that a port will stay in a silent state before processing the next PDU if the authentication process fails. The number of seconds between each authentication attempt. The number of seconds that the Switch will wait for a request from the RADIUS server before timing out the RADIUS server. The number of seconds that the Switch will wait for a response from the supplicant before timing out the supplicant (client). Table 40-1 802.1X Timer Values DGS-6600 Configuration Guide 436