Dot1xDeviceGenProtocolParams Object

HOME | TECHNOLOGIES | TEST CONFIGURATION | SEQUENCER COMMANDS | GUI COMMAND NAMES | ALL COMMANDS | RESULT | PDU | ALL | OBJECT TREE

Description:

802.1X device wizard settings.

Parents: EmulatedDeviceGenParams, HostGenParams, RouterGenParams

Children: DeviceGenLinkedStep

Dot1xDeviceGenProtocolParams Writable Attributes

Attribute Description
Common Writable Attributes Active, Name
AuthenticatorMac

MAC address of the authenticator DUT.

Type: mac

Default: 00:10:94:00:00:02
AuthRetryCount

Number of retries attempted when authentication fails.

Type: u32

Default: 10
AuthRetryIntervalInMsec

Authentication retry interval (in ms).

Type: u32

Default: 1000
Certificate

X.509 certificate(s) required for EAP-TLS authentication. The use of wildcard characters are supported to generate a unique certificate name for each supplicant in a block (for example, 'spirent@s' where '@s' represents the supplicant index).

Type: string

Default: "" (empty string)

DuplicateUIDPasswd

Duplicate UserID and Password from Supplicant's to inner tunnel which mean's use the same UserID and Password for both tunnel and inner tunnel EAP authentication.

Type: bool

Default: TRUE

Possible Values:

Value Description
TRUE

Supplicant's UserID and Password will be duplicated to inner tunnel.
FALSE

Supplicant's UserID and Password will NOT be duplicated to inner tunnel. Use different ones for tunnel and inner tunnel
EapAuthMethod

EAP authentication method for supplicant(s).

Type: enum

Default: MD5

Possible Values:

Value Description
MD5

EAP-MD5 authentication method.
FAST

EAP-FAST authentication method.
PEAP

EAP-PEAP authentication method.
TLS

EAP-TLS authentication method.
TLS12

TLS auth and TLS version is 1.2
TTLS

EAP-TTLS authentication method.
EnableClientCert

Supplicant can use X.509 certificate(s) if required.

Type: bool

Default: FALSE

Possible Values:

Value Description
TRUE

Supplicant will have a certificate
FALSE

Supplicant will NOT have a certificate
InnerCertificate

X.509 certificate(s) required for EAP-TLS authentication for inner tunnel TLS. The use of wildcard characters are supported to generate a unique certificate name for each supplicant in a block (for example, 'spirent@s' where '@s' represents the supplicant index).

Type: string

Default: "" (empty string)

InnerPassword

Supplicant password(s) of inner tunnel. The use of wildcard characters are supported to generate a unique value for each supplicant in a block (for example, 'spirent@s' where '@s' represents the supplicant index).

Type: string

Default: spirent
InnerTunnelEapAuthMethod

EAP authentication method for supplicant(s) used in inner tunnel.

Type: enum

Default: AUTO

Possible Values:

Value Description
AUTO

Automatically use the EAP method preferred by RADIUS server(either GTC, MSCHAPv2 or MD5).
GTC

EAP-GTC authentication method.
MSCHAPV2

EAP-MSCHAPv2 authentication method.
MD5

EAP-MD5 authentication method.
InnerUserId

Supplicant user id(s) of inner tunnel. The use of wildcard characters are supported to generate a unique value for each supplicant in a block (for example, 'spirent@s' where '@s' represents the supplicant index).

Type: string

Default: spirent
PacKeyFileName

AC key file(s) required for EAP-FAST authentication. The use of wildcard characters are supported to generate a unique filename for each supplicant in a block (for example, 'spirent@s' where '@s' represents the supplicant index).

Type: string

Default: "" (empty string)

Password

Supplicant password(s). The use of wildcard characters are supported to generate a unique value for each supplicant in a block (for example, 'spirent@s' where '@s' represents the supplicant index).

Type: string

Default: spirent
PeapVersion

Version information of EAP-PEAP used by Supplicant.

Type: enum

Default: PEAPAUTO

Possible Values:

Value Description
PEAPV0

EAP-PEAP version 0.
PEAPV1

EAP-PEAP version 1.
PEAPAUTO

Automatically use PEAPv0 or PEAPv1 according to RADIUS server's.
RetransmitCount

Number of retransmission attempts for EAPOL/EAP packets.

Type: u32

Default: 10
RetransmitIntervaInMsec

Retransmission interval (in ms) for EAPOL/EAP packets.

Type: u32

Default: 1000
UseAuthenticatorMacForAll

Use authenticator MAC for all Tx.

Type: bool

Default: FALSE

Possible Values:

Value Description
TRUE

Use authenticator MAC.
FALSE

Do not use authenticator MAC.
UsePaeGroupMac

Indicates whether to use the PAE multicast MAC (that is, 01:80:C2:00:00:03) in transmitted EAPOL packets. Note that 'AuthenticatorMac' will be ignored when this option is enabled.

Type: bool

Default: TRUE

Possible Values:

Value Description
TRUE

Use PAE multicast MAC address.
FALSE

Use 'AuthenticatorMac' address.
UserId

Supplicant user id(s). The use of wildcard characters are supported to generate a unique value for each supplicant in a block (for example, 'spirent@s' where '@s' represents the supplicant index).

Type: string

Default: spirent

Dot1xDeviceGenProtocolParams Read-Only Attributes

There are no read-only attributes.