8021x

eap {tls|ttls|leap|peap} {chap|mschap|mschapv2|pap|md5|tls}

You can specify the EAP authentication type.

tls: EAP-TLS (default)

ttls: EAP-TTLS

leap: LEAP

peap: PEAP

chap, mschap, mschapv2, pap, md5, and tls are settings for the phase 2 method, and one of these must be specified if EAP-TTLS or PEAP is selected.

Do not make these settings when using other EAP authentication types.

If you select EAP-TTLS, you can select chap, mschap, mschapv2, pap, or md5.

If you select PEAP, you can select mschapv2 or tls.

username "character string"

You can specify the login user name for the Radius server.

Usable characters: ASCII 0x20-0x7e (31 bytes).

The default is blank.

username2 "character string"

You can specify the phase 2 username for EAP-TTLS/PEAP phase 2 authentication.

Usable characters: ASCII 0x20-0x7e (31 bytes).

The default is blank.

domain "character string"

You can specify the login domain name for the Radius server.

The characters you can enter are ASCII 0x20-0x7e (64 bytes), but not "@" or "\".

The default is blank.

password "character string"

You can specify the login password for the Radius server.

Usable characters: ASCII 0x20-0x7e (128 bytes). The default is blank.

srvcert {on|off}

You can set the server certificate.

The default is "off".

imca {on|off}

You can enable or disable the certificate when the intermediate certificate authority is present. The default is "off".

srvid "character string"

You can set the server ID and sub domain of the certificate server.

Usable characters: ASCII 0x20-0x7e (128 bytes). The default is blank.

subdomain {on|off}

You can specify whether or not to permit access to the machine by users in subdomains use.

The default is "off".

clear {a each command|all}

Returns the selected setting to its default value.

If you specify "all", all settings will be restored to their default values. However, IEEE 802.1x Auth. status (enable or disable) for Ethernet will not be initialized.