Configuring Port-Based and User-Based Access Control (802.1X)
Configuring Switch Ports as 802.1X Authenticators
11-26
5. Enable 802.1X Authentication on the Switch
After configuring 802.1X authentication as described in the preceding four
sections, activate it with this command:
Syntax:
aaa port-access authenticator active
Activates 802.1X port-access on ports you have configured
as authenticators.
6. Optional: Reset Authenticator Operation
While 802.1X authentication is operating, you can use the following aaa port-
access authenticator commands to reset 802.1X authentication and statistics
on specified ports.
Syntax:
aaa port-access authenticator < port-list >
[initialize]
On the specified ports, blocks inbound and outbound
traffic and restarts the 802.1X authentication process.
This happens only on ports configured with control auto
and actively operating as 802.1X authenticators.
[reauthenticate]
On the specified ports, forces reauthentication (unless
the authenticator is in "HELD" state).
[clear-statistics]
On the specified ports, clears authenticator statistics
counters.
7. Optional: Configure 802.1X Controlled Directions
After you enable 802.1X authentication on specified ports, you can use the aaa
port-access controlled-directions command to configure how a port transmits
traffic before it successfully authenticates a client and enters the authenti
cated state.
As documented in the IEEE 802.1X standard, an 802.1X-aware port that is
unauthenticated can control traffic in either of the following ways:
■
In both ingress and egress directions by disabling both the reception of
incoming frames and transmission of outgoing frames
■
Only in the ingress direction by disabling only the reception of incoming
frames.
Need help?
Do you have a question about the 2610 and is the answer not in the manual?
Questions and answers