TP-Link TL-SG5426 User Guide - Page 322

4 Authentication Commands 802.1X Port Authentication The switch supports IEEE 802.1X (dot1x) port-based access control that prevents unauthorized access to the network by requiring users to first submit credentials for authentication. Client authentication is controlled centrally by a RADIUS server using EAP (Extensible Authentication Protocol). Command dot1x system-auth-control dot1x default dot1x max-req dot1x port-control dot1x operation-mode dot1x re-authenticate dot1x re-authentication dot1x timeout quiet-period dot1x timeout re-authperiod dot1x timeout tx-period show dot1x Table 4-32 802.1X Port Authentication Function Mode Enables dot1x globally on the switch. GC Resets all dot1x parameters to their default values GC Sets the maximum number of times that the switch IC retransmits an EAP request/identity packet to the client before it times out the authentication session Sets dot1x mode for a port interface IC Allows single or multiple hosts on an dot1x port IC Forces re-authentication on specific ports PE Enables re-authentication for all ports IC Sets the time that a switch port waits after the Max IC Request Count has been exceeded before attempting to acquire a new client Sets the time period after which a connected client must IC be re-authenticated Sets the time period during an authentication session that IC the switch waits before re-transmitting an EAP packet Shows all dot1x related information PE Page 4-81 4-82 4-82 4-82 4-83 4-84 4-84 4-84 4-85 4-85 4-86 dot1x system-auth-control This command enables 802.1X port authentication globally on the switch. Use the no form to restore the default. Syntax [no] dotx system-auth-control Default Setting Disabled Command Mode Global Configuration Example Console(config)#dot1x system-auth-control Console(config)# 4-81