Cisco Catalyst 4500 Series Command Reference Manual page 95

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
To globally disable 802.1X on the device, you must disable it on each port. There is no global
configuration command for this task.
You can verify your settings with the show authentication privileged EXEC command.
The auto keyword allows you to send and receive only Extensible Authentication Protocol over LAN
(EAPOL) frames through the port. The authentication process begins when the link state of the port
transitions from down to up or when an EAPOL-start frame is received. The system requests the identity
of the client and begins relaying authentication messages between the client and the authentication
server. Each client attempting to access the network is uniquely identified by the system through the
client's MAC address.
Examples
The following example shows that the authentication status of the client PC will be determined by the
authentication process:
Switch(config-if)# authentication port-control auto
Switch(config-if)#
Related Commands Command
show authentication
OL-27596 -01
Switch Port Analyzer (SPAN) destination port—You can enable 802.1X on a port that is a SPAN
–
destination port; however, 802.1X is disabled until the port is removed as a SPAN destination.
You can enable 802.1X on a SPAN source port.
Description
Displays Authentication Manager information.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.4.0SG and IOS 15.1(2)SG)
authentication port-control
2-37