Authentication Commands

4-113

4

dot1x default

This command sets all configurable dot1x global and port settings to their default
values.
Command Mode
Global Configuration
Example

dot1x max-req

This command sets the maximum number of times the switch port will retransmit an
EAP request/identity packet to the client before it times out the authentication
session. Use the no form to restore the default.
Syntax
dot1x max-req count
no dot1x max-req
count – The maximum number of requests (Range: 1-10)
Default
2
Command Mode
Interface Configuration
Example

dot1x port-control

This command sets the dot1x mode on a port interface. Use the no form to restore
the default.
Syntax
dot1x port-control {auto | force-authorized | force-unauthorized}
no dot1x port-control
auto – Requires a dot1x-aware connected client to be authorized by the
RADIUS server. Clients that are not dot1x-aware will be denied access.
force-authorized – Configures the port to grant access to all clients, either
dot1x-aware or otherwise.
force-unauthorized Configures the port to deny access to all clients,
either dot1x-aware or otherwise.
Console(config)#dot1x default
Console(config)#
Console(config)#interface eth 1/2
Console(config-if)#dot1x max-req 2
Console(config-if)#