796
Example:
Setting EAP local end authentication for the switch.
Switch(Config)#no dot1x eapor enable
20.2.2.5 dot1x enable
Command: dot1x enable
no dot1x enable
Function:
Enables the 802.1x function in the switch and ports: the "
no dot1x enable
"
command disables the 802.1x function.
Command mode:
Global Mode and Interface Mode.
Default:
802.1x function is not enabled in global mode by default; if 802.1x is enabled
under Global Mode, 802.1x will not be enabled for the ports by default.
Usage Guide:
The 802.1x authentication for the switch must be enabled first to enable
802.1x authentication for the respective ports. If Spanning Tree or MAC binding is
enabled on the port, or the port is a Trunk port or member of port aggregation group,
802.1x function cannot be enabled for that port unless such conditions are removed.
Example:
Enable the 802.1x function of the switch and enable 802.1x for port 1/12.
Switch(Config)#dot1x enable
Switch(Config)#interface ethernet 1/12
Switch(Config-Ethernet0/0/12)#dot1x enable
20.2.2.6 dot1x macfilter enable
Command: dot1x macfilter enable
no dot1x macfilter enable
Function:
Enables the dot1x address filter function in the switch; the "
no dot1x macfilter
enable
" command disables the dot1x address filter function.
Command mode:
Global Mode
Default:
dot1x address filter is disabled by default.
Usage Guide:
When dot1x address filter function is enabled, the switch will filter the
authentication user by the MAC address. Only the authentication request initialed by the
users in the dot1x address filter table will be accepted.
Example:
Enable dot1x address filter function for the switch.
Switch(Config)#dot1x macfilter enable
20.2.2.7 dot1x max-req
Command: dot1x max-req <count>
no dot1x max-req
Function:
Sets the number of EAP request/MD5 frame to be sent before the switch
re-initials authentication on no supplicant response; the “
no dot1x max-req
” command
