Enterasys Networks D2G124-12P Benutzerhandbuch

set eapol

D-Series CLI Reference 15-17

Use this command to enable or disable EAPOL port‐based user authentication with the RADIUS 
server and to set the authentication mode for one or more ports.

set eapol [enable | disable] [auth-mode {auto | forced-auth | forced-unauth} 
port-string

Authentication State

Current EAPOL authentication state for each port. Possible internal states for the 
authenticator (switch) are: 
• initialize: A port is in the initialize state when:

–

authentication is disabled, 

–

authentication is enabled and the port is not linked, or

–

authentication is enabled and the port is linked. (In this case very 
little time is spent in this state, it immediately transitions to the 
connecting state, via disconnected.

• disconnected: The port passes through this state on its way to connected 

whenever the port is reinitialized, via link state change, reauthentication failure, or 
management intervention.

• connecting: While in this state, the authenticator sends request/ID messages to 

the end user. 

• authenticating: The port enters this state from connecting after receiving a 

response/ID from the end user. It remains in this state until the entire 
authentication exchange between the end user and the authentication server 
completes.

• authenticated: The port enters this state from authenticating state after the 

exchange completes with a favorable result. It remains in this state until linkdown, 
logoff, or until a reauthentication begins.

• aborting: The port enters this state from authenticating when any event occurs 

that interrupts the login exchange.

• held: After any login failure the port remains in this state for the number of 

seconds equal to quietPeriod (can be set using MIB).

• forceAuth: Management is allowing normal, unsecured switching on this port.
• forceUnauth: Management is preventing any frames from being forwarded to or 

from this port.

Authentication Mode Mode enabling network access for each port. Modes include:

• Auto: Frames are forwarded according to the authentication state of each port. 
• Forced Authorized Mode: Meant to disable authentication on a port. It is 

intended for ports that support ISLs and devices that cannot authenticate, such 
as printers and file servers. If a default policy is applied to the port via the policy 
profile MIB, then frames are forwarded according to the configuration set by that 
policy, otherwise frames are forwarded according to the current configuration for 
that port. Authentication using 802.1X is not possible on a port in this mode.

• Forced Unauthorized Mode: All frames received on the port are discarded by a 

filter. Authentication using 802.1X is not possible on a port in this mode.