4 Command Line Interface

Example

The following example enables port security for port 5, and sets the response to a security violation to issue a trap message:

Console(config)#interface ethernet 1/5

Console(config-if)#port security action trap

Related Commands

shutdown (4-129)mac-address-table static (4-147) show mac-address-table(4-148)

802.1X Port Authentication

The switch supports IEEE 802.1X (dot1x) port-based access control that prevents unauthorized access to the network by requiring users to first submit credentials for authentication. Client authentication is controlled centrally by a RADIUS server using EAP (Extensible Authentication Protocol).

Table 4-32 802.1X Port Authentication Commands

Command

Function

Mode

Page

 

 

 

 

dot1x system-auth-control

Enables dot1x globally on the switch.

GC

4-79

 

 

 

 

dot1x default

Resets all dot1x parameters to their default values

GC

4-79

 

 

 

 

dot1x max-req

Sets the maximum number of times that the switch

IC

4-79

 

retransmits an EAP request/identity packet to the client

 

 

 

before it times out the authentication session

 

 

dot1x port-control

Sets dot1x mode for a port interface

IC

4-80

 

 

 

 

dot1x operation-mode

Allows single or multiple hosts on an dot1x port

IC

4-80

 

 

 

 

dot1x re-authenticate

Forces re-authentication on specific ports

PE

4-81

 

 

 

 

dot1x re-authentication

Enables re-authentication for all ports

IC

4-81

 

 

 

 

dot1x timeout quiet-period

Sets the time that a switch port waits after the Max

IC

4-82

 

Request Count has been exceeded before attempting to

 

 

 

acquire a new client

 

 

dot1x timeout re-authperiod

Sets the time period after which a connected client must

IC

4-82

 

be re-authenticated

 

 

dot1x timeout tx-period

Sets the time period during an authentication session that

IC

4-83

 

the switch waits before re-transmitting an EAP packet

 

 

show dot1x

Shows all dot1x related information

PE

4-83

 

 

 

 

4-78