Cisco Catalyst 3560X-24P Command Reference Manual page 211

Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
•
•
•
To globally disable IEEE 802.1x authentication on the switch, use the no dot1x system-auth-control
global configuration command. To disable IEEE 802.1x authentication on a specific port or to return to
the default setting, use the no dot1x port-control interface configuration command.
Examples This example shows how to enable IEEE 802.1x authentication on a port:
Switch(config)# interface gigabitethernet2/0/1
Switch(config-if)# dot1x port-control auto
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Related Commands Command
show dot1x
OL-21522-02
Dynamic-access ports—If you try to enable IEEE 802.1x authentication on a dynamic-access
(VLAN Query Protocol [VQP]) port, an error message appears, and IEEE 802.1x authentication is
not enabled. If you try to change an IEEE 802.1x-enabled port to dynamic VLAN assignment, an
error message appears, and the VLAN configuration is not changed.
EtherChannel port—Do not configure a port that is an active or a not-yet-active member of an
EtherChannel as an IEEE 802.1x port. If you try to enable IEEE 802.1x authentication on an
EtherChannel port, an error message appears, and IEEE 802.1x authentication is not enabled.
Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) destination ports—You can enable
IEEE 802.1x authentication on a port that is a SPAN or RSPAN destination port. However,
IEEE 802.1x authentication is disabled until the port is removed as a SPAN or RSPAN destination.
You can enable IEEE 802.1x authentication on a SPAN or RSPAN source port.
[interface interface-id]
Description
Displays IEEE 802.1x status for the specified port.
Catalyst 3750-X and 3560-X Switch Command Reference
dot1x port-control
2-179