HP GbE2c HP GbE2c Ethernet Blade Switch for c-Class BladeSystem Command Refere - Page 111

x Port configuration

Get HP GbE2c - Blc Layer 2/3 Fiber SFP Option PDF manuals and user guides
UPC - 808736802215
View all HP GbE2c manuals
Add to My Manuals
Save this manual to your list of manuals

Page 111 highlights

Table 104 802.1x Global Configuration Menu options Command maxreq raperiod reauth on|off default cur Description Sets the maximum number of times the authenticator retransmits an EAP-Request packet to the supplicant (client). The default value is 2. Sets the time, in seconds, the authenticator waits before re-authenticating a supplicant (client) when periodic re-authentication is enabled. The default value is 3600 seconds. Sets the re-authentication status to on or off. The default value is off. Resets the global 802.1x parameters to their default values. Displays current global 802.1x parameters. 802.1x Port configuration Command: /cfg/l2/8021x/port [802.1x Port Configuration Menu] mode - Set access control mode qtperiod - Set EAP-Request/Identity quiet time interval txperiod - Set EAP-Request/Identity retransmission timeout suptmout - Set EAP-Request retransmission timeout svrtmout - Set server authentication request timeout maxreq - Set max number of EAP-Request retransmissions raperiod - Set reauthentication time interval reauth - Set reauthentication status to on or off default - Restore default 802.1x configuration global - Apply current global 802.1x configuration to this port cur - Display current 802.1x configuration The 802.1x port menu allows you to configure parameters that affect the selected port in the switch. These settings override the global 802.1x parameters. The following table describes the 802.1x Port Configuration Menu options. Table 105 802.1x Global Configuration Menu options Command mode forceunauth|auto|force-auth qtperiod txperiod suptmout svrtmout maxreq Description Sets the type of access control for the port: • force-unauth - the port is unauthorized unconditionally. • auto - the port is unauthorized until it is successfully authorized by the RADIUS server. • force-auth - the port is authorized unconditionally, allowing all traffic. The default value is force-auth. Sets the time, in seconds, the authenticator waits before transmitting an EAPRequest/ Identity frame to the supplicant (client) after an authentication failure in the previous round of authentication. The default value is 60 seconds. Sets the time, in seconds, the authenticator waits for an EAP-Response/Identity frame from the supplicant (client) before retransmitting an EAP-Request/Identity frame. The default value is 30 seconds. Sets the time, in seconds, the authenticator waits for an EAP-Response packet from the supplicant (client) before retransmitting the EAP-Request packet to the authentication server. The default value is 30 seconds. Sets the time, in seconds, the authenticator waits for a response from the RADIUS server before declaring an authentication timeout. The default value is 30 seconds. The time interval between transmissions of the RADIUS Access-Request packet containing the supplicant's (client's) EAP-Response packet is determined by the current setting of /cfg/sys/radius/timeout (default is 3 seconds). Sets the maximum number of times the authenticator retransmits an EAP-Request packet to the supplicant (client). The default value is 2. Configuration Menu 111

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
Configuration Menu 111
Table 104
802.1x Global Configuration Menu options
Command
Description
maxreq <
1-10
>
Sets the maximum number of times the authenticator retransmits an EAP-Request
packet to the supplicant (client). The default value is 2.
raperiod <
1-604800
>
Sets the time, in seconds, the authenticator waits before re-authenticating a
supplicant (client) when periodic re-authentication is enabled. The default value
is 3600 seconds.
reauth on|off
Sets the re-authentication status to
on
or
off
. The default value is
off
.
default
Resets the global 802.1x parameters to their default values.
cur
Displays current global 802.1x parameters.
802.1x Port configuration
Command:
/cfg/l2/8021x/port <
port number
>
[802.1x Port Configuration Menu]
mode
- Set access control mode
qtperiod - Set EAP-Request/Identity quiet time interval
txperiod - Set EAP-Request/Identity retransmission timeout
suptmout - Set EAP-Request retransmission timeout
svrtmout - Set server authentication request timeout
maxreq
- Set max number of EAP-Request retransmissions
raperiod - Set reauthentication time interval
reauth
- Set reauthentication status to on or off
default
- Restore default 802.1x configuration
global
- Apply current global 802.1x configuration to this port
cur
- Display current 802.1x configuration
The 802.1x port menu allows you to configure parameters that affect the selected port in the switch. These settings
override the global 802.1x parameters.
The following table describes the 802.1x Port Configuration Menu options.
Table 105
802.1x Global Configuration Menu options
Command
Description
mode force-
unauth|auto|force-auth
Sets the type of access control for the port:
•
force-unauth
- the port is unauthorized unconditionally.
•
auto
- the port is unauthorized until it is successfully authorized by the
RADIUS server.
•
force-auth
- the port is authorized unconditionally, allowing all traffic.
The default value is
force-auth
.
qtperiod <
0-65535
>
Sets the time, in seconds, the authenticator waits before transmitting an EAP-
Request/ Identity frame to the supplicant (client) after an authentication failure
in the previous round of authentication. The default value is 60 seconds.
txperiod <
1-65535
>
Sets the time, in seconds, the authenticator waits for an EAP-Response/Identity
frame from the supplicant (client) before retransmitting an EAP-Request/Identity
frame. The default value is 30 seconds.
suptmout <
1-65535
>
Sets the time, in seconds, the authenticator waits for an EAP-Response packet
from the supplicant (client) before retransmitting the EAP-Request packet to the
authentication server. The default value is 30 seconds.
svrtmout <
1-65535
>
Sets the time, in seconds, the authenticator waits for a response from the
RADIUS server before declaring an authentication timeout. The default value is
30 seconds.
The time interval between transmissions of the RADIUS Access-Request packet
containing the supplicant’s (client’s) EAP-Response packet is determined by the
current setting of
/cfg/sys/radius/timeout
(default is 3 seconds).
maxreq <
1-10
>
Sets the maximum number of times the authenticator retransmits an EAP-Request
packet to the supplicant (client). The default value is 2.