802.1x Commands 823
console(config-if-1/0/2)#dot1x max-users 3
dot1x port-control
Use the dot1x port-control command in Interface Configuration mode to
enable the IEEE 802.1X operation on the port.
Syntax
dot1x port-control {force-authorized | force-unauthorized | auto | mac-
based}
no dot1x port-control
•
auto
— Enables 802.1x authentication on the interface a nd causes the
port to transition to the authorized or unauthorized state based on the
802.1x authentication exchange between the switch and the client.
•
force-authorized
— Disables 802.1x authentication on the interface and
causes the port to transition to the authorized state without any
authentication exchange required. The port sends and receives normal
traffic without 802.1x-based authentication of the client.
•
force-unauthorized
—
Denies all access through this interface by forcing
the port to transition to the unauthorized state, ignoring all attempts by
the client to authenticate. The switch can not provide authentication
services to the client through the interface.
•
mac-based
— Enables 802.1x authentication on the interface and allows
multiple hosts to authenticate on a single port. The hosts are distinguished
by their MAC addresses.
Default Configuration
The default configuration is auto.
Command Mode
Interface Configuration (Ethernet) mode
2CSPC4.XCT-SWUM2XX1.book Page 823 Monday, October 3, 2011 11:05 AM