ManualsContentsPreviousNext |
Use the "8021x" command to display IEEE 802.1x related information.
View settings
msh> 8021x
Configuration
msh> 8021x eap {tls|ttls|leap|peap} {chap|mschap|mschapv2|pap|md5|tls}
You can specify the EAP authentication type.
tls: EAP-TLS (default)
ttls: EAP-TTLS
leap: LEAP
peap: PEAP
chap, mschap, mschapv2, pap, md5, or tls are settings for the phase 2 method, and must be set when using EAP-TTLS or PEAP.
Do not make these settings when using other EAP authentication types.
If you select EAP-TTLS, you can select chap, mschap, mschapv2, pap, or md5.
If you select PEAP, you can select mschapv2 or tls.
msh> 8021x username "character string"
You can specify the login user name for the Radius server.
Usable characters: ASCII 0x20-0x7e (31 bytes).
The default is blank.
msh> 8021x username2 "character string"
You can specify the phase 2 username for EAP-TTLS/PEAP phase 2 authentication.
Usable characters: ASCII 0x20-0x7e (31 bytes).
The default is blank.
msh> 8021x domain name "character string"
You can specify the login domain name for the Radius server.
The characters you can enter are ASCII 0x20-0x7e (31 bytes), but not "@" or "\".
The default is blank.
msh> 8021x password "character string"
You can specify the login password for the Radius server.
Usable characters: ASCII 0x20-0x7e (128 bytes). The default is blank.
msh> 8021x srvcert {on|off}
You can set the server certificate. The default is off.
msh> 8021x imca {on|off}
You can enable or disable the certificate when the intermediate certificate authority is present. The default is off.
msh> 8021x srvid "character string"
You can set the server ID and subdomain of the certificate server.
Usable characters: ASCII 0x20-0x7e (128 bytes). The default is blank.
msh> 8021x subdomain
You can specify permissions for the subdomain.
msh> 8021x clear {a each command|all}
Returns the selected setting to its default value.
If you specify "all", all settings will be restored to their default values. However, IEEE 802.1x Auth. status (enable or disable) for Ethernet will not be initialized.