Dot1X Port-Control - Cisco 300 Series Cli Manual

2
61
2.15

dot1x port-control

Use the dot1x port-control Interface Configuration mode command to enable
manual control of the port authorization state. Use the no form of this command to
restore the default configuration.
Syntax
dot1x port-control {auto | force-authorized | force-unauthorized} [time-range
time-range-name
]
Parameters
•
auto—Enables 802.1X authentication on the port and causes it to transition
to the authorized or unauthorized state, based on the 802.1X authentication
exchange between the device and the client.
•
force-authorized—Disables 802.1X authentication on the interface and
causes the port to transition to the authorized state without any
authentication exchange required. The port sends and receives traffic
without 802.1X-based client authentication.
•
force-unauthorized—Denies all access through this port by forcing it to
transition to the unauthorized state and ignoring all attempts by the client to
authenticate. The device cannot provide authentication services to the
client through this port.
•
time-range-name
time-range
Range is not in effect, the port state is Unauthorized. (Range: 1-32
characters).
Default Configuration
The port is in the force-authorized state.
Command Mode
Interface (Ethernet) Configuration mode
User Guidelines
The switch removes all MAC addresses learned on a port when its authorization
control is changed from force-authorized to another.
Note. It is recommended to disable spanning tree or to enable spanning-tree
PortFast mode on 802.1X edge ports in auto state that are connected to end
—Specifies a time range. When the Time
OL-32830-01 Command Line Interface Reference Guide
802. 1 X Commands