802.1x Commands
439
DELL CONFIDENTIAL – PRELIMINARY 9/13/06 – FOR PROOF ONLY
Syntax
dot1x port-control
{
auto
|
force-authorized
|
force-unauthorized
}
no dot1x port-control
•
auto —
Enables 802.1X authentication on the interface and causes the port to transition
to the authorized or unauthorized state based on the 802.1X authentication exchange
between the port and the client.
•
force-authorized —
Disables 802.1X authentication on the interface and causes the port
to transition to the authorized state without any authentication exchange required. The
port resends and receives normal traffic without 802.1X-based authentication of the
client.
•
force-unauthorized —
Denies all access through this interface by forcing the port to
transition to the unauthorized state and ignoring all attempts by the client to
authenticate. The device cannot provide authentication services to the client through the
interface.
Default Configuration
Port is in the force-authorized state
Command Mode
Interface Configuration (Ethernet)
User Guidelines
•
It is recommended to disable spanning tree or to enable spanning-tree PortFast mode on
802.1x edge ports (ports in
auto
state that are connected to end stations), in order to get
immediately to the forwarding state after successful authentication.
Examples
The following example enables 802.1X authentication on Ethernet port 1/e16.
dot1x
r
e-authentication
The
dot1x re-authentication
Interface Configuration mode command enables periodic
re-authentication of the client. To return to the default configuration, use the
no
form of this
command.
Console(config)#
interface ethernet
1/e16
Console(config-if)#
dot1x port-control auto
