Reference Guide

Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide show aaa authentication dot1x | 501
To display a complete list of parameters for an individual profile, include the <profile> parameter. The example
below displays some of the profile details for the authentication profile pDotix.
The output of the show aaa authentication dot1x command includes the following parameters:
Parameter Value
Max authentication failures Number of times a user can try to login with wrong credentials after
which the user is blacklisted as a security threat. Blacklisting is
disabled if this parameter is set to 0.
Enforce Machine Authentication Shows if machine authentication is enabled or disabled for Windows
environments. If enabled, If enabled, either the machine-default-role or
the user-default-role is assigned to the user, depending on which
authentication is successful.
Machine Authentication: Default
Machine Role
Default role assigned to the user after completing only machine
authentication.
Machine Authentication Cache Timeout The timeout period, in hours, for machine authentication. After this
period passes, the user has to re-authenticate.
Blacklist on Machine Authentication
Failure
If enabled, the client is blacklisted if machine authentication fails.
Machine Authentication: Default User
Role
Default role assigned to the user after 802.1x authentication.
Interval between Identity Requests Interval, in seconds, between identity request retries
Quiet Period after Failed
Authentication
Interval, in seconds, following failed authentication.
Reauthentication Interval Interval, in seconds, between reauthentication attempts.
Use Server provided Reauthentication
Interval
If enabled, 802.1x authentication will use the server-provided
reauthentication period.
Multicast Key Rotation Time Interval Interval, in seconds, between multicast key rotations.
Unicast Key Rotation Time Interval Interval, in seconds, between unicast key rotations.
Authentication Server Retry Interval Server group retry interval, in seconds.
Authentication Server Retry Count The number of server group retries.
Framed MTU Shows the framed MTU attribute sent to the authentication server.
(host) #show aaa authentication dot1x pDot1x
802.1X Authentication Profile "pDot1x"
--------------------------------------
Parameter Value
--------- -----
Max authentication failures 0
Enforce Machine Authentication Disabled
Machine Authentication: Default Machine Role guest
Machine Authentication Cache Timeout 24 hrs
Blacklist on Machine Authentication Failure Disabled
Machine Authentication: Default User Role guest
Interval between Identity Requests 30 sec
Quiet Period after Failed Authentication 30 sec
Reauthentication Interval 86400 sec
Use Server provided Reauthentication Interval Disabled
Multicast Key Rotation Time Interval 1800 sec
Unicast Key Rotation Time Interval 900 sec
...