Skip header
 

8021x

Use the "8021x" commands to display IEEE 802.1x related information.

View settings

msh> 8021x

Configuration

msh> 8021x "parameter"

Parameter

Value configured

eap {tls|ttls|leap|peap} {chap|mschap|mschapv2|pap|md5|tls}

You can specify the EAP authentication type.

tls: EAP-TLS (default)

ttls: EAP-TTLS

leap: LEAP

peap: PEAP

chap, mschap, mschapv2, pap, md5, or tls are settings for the phase 2 method, and must be set when using EAP-TTLS or PEAP.

Do not make these settings when using other EAP authentication types.

If you select EAP-TTLS, you can select chap, mschap, mschapv2, pap, or md5.

If you select PEAP, you can select mschapv2 or tls.

username "character string"

You can specify the login user name for the Radius server.

Usable characters: ASCII 0x20-0x7e (31 bytes).

The default is blank.

username2 "character string"

You can specify the phase 2 username for EAP-TTLS/PEAP phase 2 authentication.

Usable characters: ASCII 0x20-0x7e (31 bytes).

The default is blank.

domain name "character string"

You can specify the login domain name for the Radius server.

The characters you can enter are ASCII 0x20-0x7e (31 bytes), but not "@" or "\".

The default is blank.

password "character string"

You can specify the login for the Radius server.

Usable characters: ASCII 0x20-0x7e (128 bytes). The default is blank.

srvcert {on|off}

You can set the server certificate. The default is "off".

imca {on|off}

You can enable or disable the certificate when the intermediate certificate authority is present. The default is "off".

srvid "character string"

You can set the server ID and subdomain of the certificate server.

Usable characters: ASCII 0x20-0x7e (128 bytes). The default is blank.

subdomain {on|off}

You can specify the subdomain permission.

clear {a each command|all}

Returns the selected setting to its default value.

If you specify "all", all settings will be restored to their default values. However, IEEE 802.1x Auth. status (enable or disable) for Ethernet and wireless LAN will not be initialized.