40-22
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 40 Configuring 802.1X Authentication
Configuring 802.1X Authentication on the Switch
available to authenticate. The ports moved to critical state are initalized when the RADIUS server comes
online and the RADIUS auto-initialization feature is enabled. During the initialization process, the ports
that were moved to the critical state are initialized after the configured critical recovery delay interval.
For example, if there are 10 ports enabled with dot1x and moved to the critical state, the ports are
initialized when the RADIUS server comes online. If you configure a delay of 10 milliseconds, the
initialization for each port is delayed by 10 milliseconds before the initialization process begins. After
each 10-millisecond period is completed, the next port initializes until all the ports have gone through
the initialization process.
This example shows how to set the critical recovery delay to 10 milliseconds for dot1x:
Console> (enable)
set dot1x critical-recovery-delay 10
Dot1x critical recovery delay set to 10 milliseconds.
Console> (enable)
Resetting the 802.1X Configuration Parameters to the Default Values
You can reset the 802.1X configuration parameters to the default values with a single command, which
also globally disables 802.1X.
To reset the 802.1X configuration parameters to the default values, perform this task in privileged mode:
This example shows how to reset the 802.1X configuration parameters to the default values and verify
the configuration:
Console> (enable)
clear dot1x config
This command will disable dot1x on all ports and take dot1x parameter values back to
factory defaults.
Do you want to continue (y/n) [
n
]?
Console> (enable)
show dot1x
PAE Capability Authenticator Only
Protocol Version 1
system-auth-control enabled
max-req 2
quiet-period 45 seconds
radius-accounting disabled
radius-vlan-assignment enabled
radius-keepalive state enabled
re-authperiod 7200 seconds
server-timeout 30 seconds
shutdown-timeout 300 seconds
supp-timeout 30 seconds
tx-period 30 seconds
Task
Command
Set the critical recovery delay feature.
set [dot1x | mac-auth-bypass | eou | web-auth]
critical-recovery-delay
time
Task
Command
Step 1
Reset the 802.1X configuration parameters to the
default values and globally disable 802.1X.
clear dot1x config
Step 2
Verify the 802.1X configuration.
show dot1x
