34.
802.1X Port-Based Authentication
MN700004 Rev 01
369
Example
device-name
(config)#
dot1x timeout tx-period 60
Setting the Unicast Supplicant Compatibility
The
dot1x unicast-client-compatibility
command, in Global Configuration mode, sets a
mode that allows dot1x to work with supplicants, but without sending EAPOL packets to
802.1X group MAC addresses. The
no
form of this command sets a mode in which the dot1x
does not work with supplicants and does not send EAPOL packets to 802.1X group MAC
addresses.
By default, this mode is disabled.
NOTE
Enabling this feature can affect the switch's performance.
Command Syntax
device-name
(config)#
dot1x unicast-client-compatibility
device-name
(config)#
no dot1x unicast-client-compatibility
802.1X Interface Configuration Commands
The table below lists the 802.1X interface configuration commands.
Table 34-5 802.1X Interface Configuration Commands
C o m m a n d D e s c r i p t i o n
dot1x port-control
Sets the 802.1X particular control type for the specified port.
dot1x re-authenticate
Activates re-authentication for all supplicants that are connected
to a specified port.
dot1x multiple-hosts
Sets 802.1X to Multiple-Hosts mode on a specified port.
dot1x control-direction
permit-in-traffic
Sets the dot1x traffic mode to Bi-directional Traffic Control per
port basis.
Setting the Control Type for a Specified Port
The
dot1x port-control c
ommand, in Interface Configuration mode, sets 802.1X control type
for the specified port. The
no
form of this command disables the dot1x for the specified port.
The command
dot1x port-control
entered without specifying a control type, sets the switch
to auto mode.
The default mode is force-authorized.
Command Syntax
device-name
(config-if
UU/SS/PP
)#
dot1x port-control [auto | force-
authorized | force-unauthorized]