2-63
Cisco Catalyst Blade Switch 3030 Command Reference
78-17262-01
Chapter 2 Cisco Catalyst Blade Switch 3030 Cisco IOS Commands
dot1x critical (global configuration)
dot1x critical (global configuration)
Use the
dot1x critical
global configuration command on a standalone switch to configure the parameters
for the inaccessible authentication bypass feature, also referred to as critical authentication or the
authentication, authorization, and accounting (AAA) fail policy. To return to default settings, use the
no
form of this command.
dot1x critical
{
eapol
|
recovery delay
milliseconds
}
no dot1x critical
{
eapol | recovery delay
}
Syntax Description
Defaults
The switch does not send an EAPOL-Success message to the host when the switch successfully
authenticates the critical port by putting the critical port in the critical-authentication state.
The recovery delay period is 1000 milliseconds (1 second).
Command Modes
Global configuration
Command History
Usage Guidelines
Use the
eapol
keyword to specify that the switch sends an EAPOL-Success message when the switch
puts the critical port in the critical-authentication state.
Use the
recovery delay
milliseconds
keyword to set the recovery delay period during which the switch
waits to re-initialize a critical port when a RADIUS server that was unavailable becomes available. The
default recovery delay period is 1000 milliseconds. A port can be re-initialized every second.
To enable inaccessible authentication bypass on a port, use the
dot1x critical
interface configuration
command. To configure the access VLAN to which the switch assigns a critical port, use the
dot1x
critical vlan
vlan-id
interface configuration command.
Examples
This example shows how to set 200 as the recovery delay period on the switch:
Switch#
dot1x critical recovery delay 200
You can verify your configuration by entering the
show dot1x
privileged EXEC command.
eapol
Specify that the switch sends an EAPOL-Success message when the
switch puts the critical port in the critical-authentication state.
recovery delay
milliseconds
Set the recovery delay period in milliseconds. The range is from 1
to 10000 milliseconds.
Release
Modification
12.2(25)SEE
This command was introduced.
