3Com 3CRUS2475 24, Command Reference Manual

Page: 471 / 522

dot1x re-authentication 471
Parameters
■
auto — Enables 802.1x authentication on the interface and causes
the port to transition to the authorized or unauthorized state based
on the 802.1x authentication exchange between the port and the
client.
■
force-authorized — Disables 802.1x authentication on the interface
and causes the port to transition to the authorized state without any
authentication exchange required. The port resends and receives
normal traffic without 802.1x-based authentication of the client.
■
force-unauthorized — Denies all access through this interface by
forcing the port to transition to the unauthorized state and ignoring
all attempts by the client to authenticate. The device cannot provide
authentication services to the client through the interface.
Default Configuration
Port is in the force-authorized state
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
It is recommended to disable spanning tree or to enable spanning-tree
PortFast mode on 802.1x edge ports (ports in auto state that are
connected to end stations), in order to get immediately to the forwarding
state after successful authentication.
Example
The following example enables 802.1x authentication on Ethernet port
16.
dot1x
re-authentication
The dot1x re-authentication Interface Configuration mode command
enables periodic re-authentication of the client. To restore the default
configuration, use the
no form of this command.
Console(config)# interface ethernet 16
Console(config-if)# dot1x port-control auto