Cisco Small Business 300 1.1 Series, Руководство администратора

Страница: 250 / 706

802.1x Commands
78-20269-01 Command Line Interface Reference Guide 251
20
no dot1x port-control
Parameters
•
auto—Enables 802.1x authentication on the interface and causes the port to
transition to the authorized or unauthorized state based on the 802.1x
authentication exchange between the device and the client.
•
force-authorized—Disables 802.1x authentication on the interface and
causes the port to transition to the authorized state without any
authentication exchange required. The port resends and receives normal
traffic without 802.1x-based client authentication.
•
force-unauthorized—Denies all access through this interface by forcing the
port to transition to the unauthorized state and ignoring all attempts by the
client to authenticate. The device cannot provide authentication services to
the client through the interface.
•
time-range time-range-name—Specifies a time range. When the Time
Range is not in effect, the port state is Unauthorized. (Range: 1–32
characters)
Default Configuration
The port is in the force-authorized state.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
It is recommended to disable spanning tree or to enable spanning-tree PortFast
mode on 802.1x edge ports (ports in auto state that are connected to end stations),
in order to proceed to the forwarding state immediately after successful
authentication.
Example
The following example enables 802.1x authentication on
gi
15.
Console(config)#
interface gi15
Console(config-if)#
dot1x port-control auto