4 Command Line Interface

dot1x port-control

This command sets the dot1x mode on a port interface. Use the no form to restore the default.

Syntax

dot1x port-control {auto force-authorized force-unauthorized} no dot1x port-control

•auto – Requires a dot1x-aware connected client to be authorized by the RADIUS server. Clients that are not dot1x-aware will be denied access.

•force-authorized – Configures the port to grant access to all clients, either dot1x-aware or otherwise.

•force-unauthorized – Configures the port to deny access to all clients, either dot1x-aware or otherwise.

Default

force-authorized

Command Mode

Interface Configuration (Ethernet Ports 1-8, Port Channel)

Example

Console(config)#interface eth 1/2

Console(config-if)#dot1x port-control auto

Console(config-if)#

dot1x operation-mode

This command allows single or multiple hosts (clients) to connect to an

802.1X-authorized port. Use the no form with no keywords to restore the default to single host. Use the no form with the multi-host max-count keywords to restore the default maximum count.

Syntax

dot1x operation-mode {single-host multi-host [max-count count]} no dot1x operation-mode [multi-host max-count]

•single-host – Allows only a single host to connect to this port.

•multi-host – Allows multiple host to connect to this port.

•max-count – Keyword for the maximum number of hosts.

count – The maximum number of hosts that can connect to a port. (Range: 1-1024; Default: 5)

Default

Single-host

Command Mode

Interface Configuration (Ethernet Ports 1-8, Port Channel)

4-80