802.1x Commands

Syntax

dot1x port-control {auto force-authorized force-unauthorized}

no dot1x port-control

Parameters

auto — Enables 802.1x authentication on the interface and causes the port to transition to the authorized or unauthorized state based on the 802.1x authentication exchange between the port and the client.

force-authorizedDisables 802.1x authentication on the interface and causes the port to transition to the authorized state without any authentication exchange required. The port resends and receives normal traffic without 802.1x-based authentication of the client.

force-unauthorizedDenies all access through this interface by forcing the port to transition to the unauthorized state and ignoring all attempts by the client to authenticate. The device cannot provide authentication services to the client through the interface.

Default Configuration

Port is in the force-authorized state

Command Mode

Interface Configuration (Ethernet)

User Guidelines

It is recommended to disable spanning tree or to enable spanning-tree PortFast mode on 802.1x edge ports (ports in auto state that are connected to end stations), in order to get immediately to the forwarding state after successful authentication.

Example

The following example enables 802.1x authentication on Ethernet port 16.

Console(config)# interface ethernet ext.16

Console(config-if)#dot1x port-control auto

Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide

385

Page 401
Image 401
Intel SBCEGBESW10 CLI manual Port is in the force-authorized state, Interface Configuration Ethernet