Edge-Core ECS3510-10PD, Management Manual

Page: 856 / 1494

C
HAPTER
23
| Authentication Commands
802.1X Port Authentication
– 856 –
dot1x eapol-pass-
through
This command passes EAPOL frames through to all ports in STP forwarding
state when dot1x is globally disabled. Use the no form to restore the
default.
S
YNTAX
[ no ] dot1x eapol-pass-through
D
EFAULT
S
ETTING
Discards all EAPOL frames when dot1x is globally disabled
C
OMMAND
M
ODE
Global Configuration
C
OMMAND
U
SAGE
◆
When this device is functioning as intermediate node in the network
and does not need to perform dot1x authentication, the dot1x eapol
pass-through command can be used to forward EAPOL frames from
other switches on to the authentication servers, thereby allowing the
authentication process to still be carried out by switches located on the
edge of the network.
◆
When this device is functioning as an edge switch but does not require
any attached clients to be authenticated, the no dot1x eapol-pass-
through command can be used to discard unnecessary EAPOL traffic.
E
XAMPLE
This example instructs the switch to pass all EAPOL frame through to any
ports in STP forwarding state.
Console(config)#dot1x eapol-pass-through
Console(config)#
dot1x system-auth-
control
This command enables IEEE 802.1X port authentication globally on the
switch. Use the no form to restore the default.
S
YNTAX
[ no ] dot1x system-auth-control
D
EFAULT
S
ETTING
Disabled
C
OMMAND
M
ODE
Global Configuration
E
XAMPLE
Console(config)#dot1x system-auth-control
Console(config)#