Command Line Interface

4-78

4
802.1x Port Authentication
The switch supports IEEE 802.1x (dot1x) port-based access control that prevents
unauthorized access to the network by requiring users to first submit credentials for
authentication. Client authentication is controlled centrally by a RADIUS server
using EAP (Extensible Authentication Protocol).

authentication dot1x default

This command sets the default authentication server type. Usethe no form to
restore the default.
Syntax
authentication dot1x default radius
no authentication dot1x
Default Setting
RADIUS
Command Mode
Global Configuration
Example
Table 4-31. 802.1x Port Authentication Commands
Command Function Mode Page
authentication dot1x default Sets the default authentication server type GC 4-78
dot1x default Resets all dot1x parameters to their default values GC 4-79
dot1x max-req Sets the maximum number of times that the switch
retransmits an EAP request/identity packet to the client
before it times out the authentication session
GC 4-79
dot1x port-control Sets dot1x mode for a port interface IC 4-80
dot1x operation-mode Allows single or multiple hosts on an dot1x port IC 4-80
dot1x re-authenticate Forces re-authentication on specific ports PE 4-81
dot1x re-authentication Enables re-authentication for all ports GC 4-81
dot1x timeout quiet-period Sets the time that a switch port waits after the Max
Request Count has been exceeded before attempting to
acquire a new client
GC 4-82
dot1x timeout re-authperiod Sets the time period after which a connected client must
be re-authenticated
GC 4-82
dot1x timeout tx-period Sets the time period during an authentication session that
the switch waits before re-transmitting an EAP packet
GC 4-83
show dot1x Shows all dot1x related information PE 4-83
Console(config)#authentication dot1x default radius
Console(config)#