Cisco Sx350, Cli Manual

Page: 98 / 1323

802.1X Commands
97 Cisco Sx350 Ph. 2.2.5 Devices - Command Line Interface Reference Guide
3
3.15 dot1x port-control
To enable manual control of the port authorization state, use the dot1x port-control
command in Interface Configuration mode. To restore the default configuration,
use the no form of this command.
Syntax
dot1x port-control {auto | force-authorized | force-unauthorized} [time-range
time-range-name ]
Parameters
•
auto—Enables 802.1X authentication on the port and causes it to transition
to the authorized or unauthorized state, based on the 802.1X authentication
exchange between the device and the client.
•
force-authorized—Disables 802.1X authentication on the interface and
causes the port to transition to the authorized state without any
authentication exchange required. The port sends and receives traffic
without 802.1X-based client authentication.
•
force-unauthorized—Denies all access through this port by forcing it to
transition to the unauthorized state and ignoring all attempts by the client to
authenticate. The device cannot provide authentication services to the
client through this port.
•
time-range time-range-name —Specifies a time range. When the Time
Range is not in effect, the port state is Unauthorized. (Range: 1-32
characters).
Default Configuration
The port is in the force-authorized state.
Command Mode
Interface (Ethernet) Configuration mode
User Guidelines
The switch removes all MAC addresses learned on a port when its authorization
control is changed from force-authorized to another.
Note. It is recommended to disable spanning tree or to enable spanning-tree
PortFast mode on 802.1X edge ports in auto state that are connected to end