Fortinet white logo
Fortinet white logo

CLI Reference

config switch-controller 802-1X-settings

config switch-controller 802-1X-settings

Configure global 802.1X settings.

config switch-controller 802-1X-settings
    Description: Configure global 802.1X settings.
    set allow-mac-move [disable|enable]
    set link-down-auth [set-unauth|no-action]
    set mab-entry-as [static|dynamic]
    set mab-reauth [disable|enable]
    set mac-called-station-delimiter [colon|hyphen|...]
    set mac-calling-station-delimiter [colon|hyphen|...]
    set mac-case [lowercase|uppercase]
    set mac-password-delimiter [colon|hyphen|...]
    set mac-username-delimiter [colon|hyphen|...]
    set max-reauth-attempt {integer}
    set reauth-period {integer}
    set tx-period {integer}
end

config switch-controller 802-1X-settings

Parameter

Description

Type

Size

Default

allow-mac-move *

Enable/disable MAC move (default = enable).

option

-

enable

Option

Description

disable

Disable MAC move.

enable

Enable MAC move.

link-down-auth

Interface-reauthentication state to set if a link is down.

option

-

set-unauth

Option

Description

set-unauth

Interface set to unauth when down. Reauthentication is needed.

no-action

Interface reauthentication is not needed.

mab-entry-as *

Configure MAB MAC entry as static or dynamic (default = static).

option

-

static

Option

Description

static

MAB MAC entry as static.

dynamic

MAB MAC entry as dynamic.

mab-reauth

Enable/disable MAB re-authentication.

option

-

disable

Option

Description

disable

Disable MAB re-authentication.

enable

Enable MAB re-authentication.

mac-called-station-delimiter

MAC called station delimiter (default = hyphen).

option

-

hyphen

Option

Description

colon

Use colon as delimiter for called station.

hyphen

Use hyphen as delimiter for called station.

none

No delimiter for called station.

single-hyphen

Use single hyphen as delimiter for called station.

mac-calling-station-delimiter

MAC calling station delimiter (default = hyphen).

option

-

hyphen

Option

Description

colon

Use colon as delimiter for calling station.

hyphen

Use hyphen as delimiter for calling station.

none

No delimiter for calling station.

single-hyphen

Use single hyphen as delimiter for calling station.

mac-case

MAC case (default = lowercase).

option

-

lowercase

Option

Description

lowercase

Use lowercase MAC.

uppercase

Use uppercase MAC.

mac-password-delimiter

MAC authentication password delimiter (default = hyphen).

option

-

hyphen

Option

Description

colon

Use colon as delimiter for MAC auth password.

hyphen

Use hyphen as delimiter for MAC auth password.

none

No delimiter for MAC auth password.

single-hyphen

Use single hyphen as delimiter for MAC auth password.

mac-username-delimiter

MAC authentication username delimiter (default = hyphen).

option

-

hyphen

Option

Description

colon

Use colon as delimiter for MAC auth username.

hyphen

Use hyphen as delimiter for MAC auth username.

none

No delimiter for MAC auth username.

single-hyphen

Use single hyphen as delimiter for MAC auth username.

max-reauth-attempt

Maximum number of authentication attempts (0 - 15, default = 3).

integer

Minimum value: 0 Maximum value: 15

3

reauth-period

Period of time to allow for reauthentication (1 - 1440 sec, default = 60, 0 = disable reauthentication).

integer

Minimum value: 0 Maximum value: 1440

60

tx-period

802.1X Tx period (seconds, default=30).

integer

Minimum value: 12 Maximum value: 60

30

* This parameter may not exist in some models.

config switch-controller 802-1X-settings

config switch-controller 802-1X-settings

Configure global 802.1X settings.

config switch-controller 802-1X-settings
    Description: Configure global 802.1X settings.
    set allow-mac-move [disable|enable]
    set link-down-auth [set-unauth|no-action]
    set mab-entry-as [static|dynamic]
    set mab-reauth [disable|enable]
    set mac-called-station-delimiter [colon|hyphen|...]
    set mac-calling-station-delimiter [colon|hyphen|...]
    set mac-case [lowercase|uppercase]
    set mac-password-delimiter [colon|hyphen|...]
    set mac-username-delimiter [colon|hyphen|...]
    set max-reauth-attempt {integer}
    set reauth-period {integer}
    set tx-period {integer}
end

config switch-controller 802-1X-settings

Parameter

Description

Type

Size

Default

allow-mac-move *

Enable/disable MAC move (default = enable).

option

-

enable

Option

Description

disable

Disable MAC move.

enable

Enable MAC move.

link-down-auth

Interface-reauthentication state to set if a link is down.

option

-

set-unauth

Option

Description

set-unauth

Interface set to unauth when down. Reauthentication is needed.

no-action

Interface reauthentication is not needed.

mab-entry-as *

Configure MAB MAC entry as static or dynamic (default = static).

option

-

static

Option

Description

static

MAB MAC entry as static.

dynamic

MAB MAC entry as dynamic.

mab-reauth

Enable/disable MAB re-authentication.

option

-

disable

Option

Description

disable

Disable MAB re-authentication.

enable

Enable MAB re-authentication.

mac-called-station-delimiter

MAC called station delimiter (default = hyphen).

option

-

hyphen

Option

Description

colon

Use colon as delimiter for called station.

hyphen

Use hyphen as delimiter for called station.

none

No delimiter for called station.

single-hyphen

Use single hyphen as delimiter for called station.

mac-calling-station-delimiter

MAC calling station delimiter (default = hyphen).

option

-

hyphen

Option

Description

colon

Use colon as delimiter for calling station.

hyphen

Use hyphen as delimiter for calling station.

none

No delimiter for calling station.

single-hyphen

Use single hyphen as delimiter for calling station.

mac-case

MAC case (default = lowercase).

option

-

lowercase

Option

Description

lowercase

Use lowercase MAC.

uppercase

Use uppercase MAC.

mac-password-delimiter

MAC authentication password delimiter (default = hyphen).

option

-

hyphen

Option

Description

colon

Use colon as delimiter for MAC auth password.

hyphen

Use hyphen as delimiter for MAC auth password.

none

No delimiter for MAC auth password.

single-hyphen

Use single hyphen as delimiter for MAC auth password.

mac-username-delimiter

MAC authentication username delimiter (default = hyphen).

option

-

hyphen

Option

Description

colon

Use colon as delimiter for MAC auth username.

hyphen

Use hyphen as delimiter for MAC auth username.

none

No delimiter for MAC auth username.

single-hyphen

Use single hyphen as delimiter for MAC auth username.

max-reauth-attempt

Maximum number of authentication attempts (0 - 15, default = 3).

integer

Minimum value: 0 Maximum value: 15

3

reauth-period

Period of time to allow for reauthentication (1 - 1440 sec, default = 60, 0 = disable reauthentication).

integer

Minimum value: 0 Maximum value: 1440

60

tx-period

802.1X Tx period (seconds, default=30).

integer

Minimum value: 12 Maximum value: 60

30

* This parameter may not exist in some models.