1-20Displaying and Maintaining 802.1x ConfigurationTo do... Use the command... RemarksDisplay the configuration,session, and statisticsinformation about 802.1xdisplay dot1x [ sessions |statistics ] [ interfaceinterface-list ]Available in any viewClear 802.1x-related statisticsinformationreset dot1x statistics[ interface interface-list ] Available in user viewConfiguration Example802.1x Configuration ExampleNetwork requirementsz Authenticate users on all ports to control their accesses to the Internet. The switch operates inMAC-based access control mode.z All supplicant systems that pass the authentication belong to the default domain named“aabbcc.net”. The domain can accommodate up to 30 users. As for authentication, a supplicantsystem is authenticated locally if the RADIUS server fails. And as for accounting, a supplicantsystem is disconnected by force if the RADIUS server fails. The name of an authenticatedsupplicant system is not suffixed with the domain name. A connection is terminated if the total sizeof the data passes through it during a period of 20 minutes is less than 2,000 bytes.z The switch is connected to a server comprising of two RADIUS servers whose IP addresses are10.11.1.1 and 10.11.1.2. The RADIUS server with an IP address of 10.11.1.1 operates as theprimary authentication server and the secondary accounting server. The other operates as thesecondary authentication server and primary accounting server. The password for the switch andthe authentication RADIUS servers to exchange message is “name”. And the password for theswitch and the accounting RADIUS servers to exchange message is “money”. The switch sendsanother packet to the RADIUS servers again if it sends a packet to the RADIUS server and doesnot receive response for 5 seconds, with the maximum number of retries of 5. And the switch sendsa real-time accounting packet to the RADIUS servers once in every 15 minutes. A user name issent to the RADIUS servers with the domain name truncated.z The user name and password for local 802.1x authentication are “localuser” and “localpass” (inplain text) respectively. The idle disconnecting function is enabled.
