739
Function:
Sets the 802.1x authentication status; the “
no dot1x port-control
” command
restores the default setting.
Parameters:
auto
enable 802.1x authentication, the port authorization status is
determined by the authentication information between the switch and the supplicant;
force-authorized
sets port to authorized status, unauthenticated data is allowed to pass
through the port;
force-unauthorized
will set the port to non-authorized mode, the switch
will not provide authentication for the supplicant and prohibit data from passing through
the port.
Command mode:
Port configuration Mode
Default:
When 802.1x is enabled for the port,
auto
is set by default.
Usage Guide:
If the port needs to provide 802.1x authentication for the user, the port
authentication mode should be set to
auto
.
Example:
Setting port0/0/1 to require 802.1x authentication mode.
Switch(Config)#interface Ethernet 0/0/1
Switch(Config-Ethernet0/0/1)#dot1x port-control auto
19.3.10 dot1x port-method
Command: dot1x port-method {macbased | portbased}
no dot1x port-method
Function:
Sets the access management method for the specified port; the “
no dot1x
port-method
” command restores the default access management method.
Parameters:
macbased
sets the MAC-based access management method;
portbased
sets port-based access management.
Command mode:
Port configuration Mode
Default:
None.
Usage Guide:
MAC-based access management is better than port-based access
management in both security and management, port-based access management is
suggested only for special usages.
Example:
Setting port-based access management for port 0/0/4.
Switch(Config-Ethernet0/0/4)#dot1x port-method portbased
19.3.11 dot1x re-authenticate
Command: dot1x re-authenticate [interface <interface-name>]
Function:
Enables real-time 802.1x re-authentication (no wait timeout requires) for all
ports or a specified port.
Parameters:
<interface-nam>
stands for port number, omitting the parameter for all
