Authentication Port-Control - Cisco Catalyst 3560-X Command Reference Manual

authentication port-control

authentication port-control
Syntax Description
Defaults
Command Modes
Command History
Usage Guidelines
Catalyst 3750-X and 3560-X Switch Command Reference
2-44
Downloaded from www.Manualslib.com
Use the authentication port-control interface configuration command to enable manual control of the
port authorization state. Use the no form of this command to return to the default setting.
authentication port-control {auto | force-authorized | force-un authorized}
no authentication port-control {auto | force-authorized | force-un authorized}
auto Enable authentication on the port. The port changes to the authorized or
unauthorized state based, on the authentication exchange between the
switch and the client.
force-authorized Disable authentication on the port. The port changes to the authorized state
without an authentication exchange. The port sends and receives normal
traffic without authentication of the client.
force-un authorized Deny all access the port. The port changes to the unauthorized state,
ignoring all attempts by the client to authenticate. The switch cannot
provide authentication services to the client through the port.
The default setting is force-authorized.
Interface configuration
Release Modification
12.2(53)SE2 This command was introduced.
Use the auto keyword only on one of these port types:
Trunk port—If you try to enable authentication on a trunk port, an error message appears, and is not
•
enabled. If you try to change the mode of an port to trunk, an error message appears, and the port
mode is not changed.
Dynamic ports—A dynamic port can negotiate with its neighbor to become a trunk port. If you try
•
to enable authentication on a dynamic port, an error message appears, and authentication is not
enabled. If you try to change the mode of an port to dynamic, an error message appears, and the port
mode does not change.
Dynamic-access ports—If you try to enable authentication on a dynamic-access (VLAN Query
•
Protocol [VQP]) port, an error message appears, and authentication is not enabled. If you try to
change an port to dynamic VLAN, an error message appears, and the VLAN configuration does not
change.
manuals search engine
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
OL-21522-02