aaa authentication wired

blacklist-time / denylist-time <timer>

no ...

profile <aaa-profile>

Description

This command configures authentication for a client device that is directly connected to a port on the managed device. It also references an AAA profile that is configured for MAC or 802.1X authentication. The port on the managed device to which the device is connected must be configured as untrusted.

Parameter	Description
blacklist-time / denylist-time <timer>	Sets the time to block the user. Range: 1-65535 seconds. Default: 3600 seconds.
no	Negates any configured parameter.
profile <aaa-profile>	Name of the AAA profile that applies to wired authentication. This profile must be configured for a Layer-2 authentication, either 802.1X or MAC.

Example

The following commands configure an AAA profile for 802.1X authentication and a wired profile that references the AAA profile:

(host) ^[md] (config) aaa profile sec-wired

dot1x-default-role employee

dot1x-server-group sec-svrs

(host) ^[md] (config) aaa authentication wired

profile sec-wired

Related Commands

Command	Description
vlan	Assign an AAA profile to an individual VLAN to enable role-based access for wired clients connected to an untrusted VLAN or port on the managed device.

Command History

Release	Modification
AOS 8.9.0.0	All instances of `blacklist` have been replaced with `denylist`.
AOS 8.2.0.0	The `blacklist-time` parameter was added.
AOS 8.0.0.0	Command introduced.

Command Information

Platforms	License	Command Mode
All platforms	Base operating system.	Config mode on Mobility Conductor.