Dot1X Port-Control - Cisco 300 Series Cli Manual

Stackable managed switches

Hide thumbs Also See for 300 Series:

Table of Contents

dot1x port-control

Use the dot1x port-control Interface Configuration mode command to enable

manual control of the port authorization state. Use the no form of this command to

restore the default configuration.

dot1x port-control {auto | force-authorized | force-unauthorized} [time-range

time-range-name

auto—Enables 802.1X authentication on the port and causes it to transition

to the authorized or unauthorized state, based on the 802.1X authentication

exchange between the device and the client.

force-authorized—Disables 802.1X authentication on the interface and

causes the port to transition to the authorized state without any

authentication exchange required. The port sends and receives traffic

without 802.1X-based client authentication.

force-unauthorized—Denies all access through this port by forcing it to

transition to the unauthorized state and ignoring all attempts by the client to

authenticate. The device cannot provide authentication services to the

client through this port.

time-range-name

Range is not in effect, the port state is Unauthorized. (Range: 1-32

characters).

Default Configuration

The port is in the force-authorized state.

Command Mode

Interface (Ethernet) Configuration mode

User Guidelines

The switch removes all MAC addresses learned on a port when its authorization

control is changed from force-authorized to another.

Note. It is recommended to disable spanning tree or to enable spanning-tree

PortFast mode on 802.1X edge ports in auto state that are connected to end

—Specifies a time range. When the Time

OL-32830-01 Command Line Interface Reference Guide

802. 1 X Commands