display dot1x-template
Usage Guidelines
Usage Scenario
When 802.1X authentication is used, the device and client negotiate parameters through a dot1x template. To check all parameter settings of the dot1x template, run the display dot1x-template command.
Precautions
In VS mode, this command is supported only by the admin VS.
Example
The actual command output varies according to the device. The command output here is only an example.
<HUAWEI> display dot1x-template 1
Template index : 1
Reauthentication switch : On
Keepalive switch : Off
Reauthentication interval(S) : 3600
Keepalive retransmit : 0
Keepalive interval(S) : 20
Request interval(S) : 30
Request retransmit : 2
Server response time(S) : 30
Send-EAP-SIM : No
EAP-end : Yes
EAP-end-authentication-method: CHAP
| Item | Description |
|---|---|
| Template index | Index of a dot1x template. |
| Reauthentication switch | Re-authentication status. Re-authentication is enabled or disabled by running the reauthentication interval command. If this field is displayed as Off, re-authentication is disabled by setting the time parameter to 0. If this field is displayed as On, re-authentication is enabled by setting the time parameter to a value ranging from 1 to 65535. |
| Reauthentication interval(S) | Interval for re-authentication after dot1x template users go online, in seconds. The default value is 57600 seconds (16 hours). |
| Keepalive switch | Handshake status. Handshake is enabled or disabled by running the keepalive command. If this field is displayed as Off, handshake is disabled by setting the retransmit times parameter to 0. If this field is displayed as On, handshake is enabled by setting the retransmit times parameter to a value ranging from 1 to 10. |
| Keepalive retransmit | Number of handshake packet retransmissions. |
| Keepalive interval(S) | Timeout period for handshake response between the EAP client and server, in seconds. |
| Request interval(S) | Timeout period for the BRAS to wait for an EAP-Response/Identity packet from the client, in seconds. |
| Request retransmit | Number of retransmissions of EAP-Request/Identity packets from the BRAS to the EAP client. |
| Server response time(S) | Timeout period for the BRAS to wait for an EAP response packet from an authentication server, in seconds. |
| Send-EAP-SIM | Whether the EAP SIM authentication identifier is supported by the BRAS.
|
| EAP-end | Whether EAP termination is required for EAP authentication using the dot1x template.
|
| EAP-end-authentication-method | Authentication methods adopted in EAP termination, which can be:
|