Table of Contents
Advertisement
Example
The following example enables port security for port 5, and sets the response to a
security violation to issue a trap message:
Console(config)#interface ethernet 1/5
Console(config-if)#port security action trap
Related Commands
shutdown (4-148)
mac-address-table static (4-167)
show mac-address-table (4-168)
802.1X Port Authentication
The switch supports IEEE 802.1X (dot1x) port-based access control that prevents
unauthorized access to the network by requiring users to first submit credentials for
authentication. Client authentication is controlled centrally by a RADIUS server
using EAP (Extensible Authentication Protocol).
Command
dot1x system-auth-control
dot1x default
dot1x max-req
dot1x port-control
dot1x operation-mode
dot1x re-authenticate
dot1x re-authentication
dot1x timeout quiet-period
dot1x timeout re-authperiod
dot1x timeout tx-period
show dot1x
Table 4-32 802.1X Port Authentication Commands
Function
Enables dot1x globally on the switch.
Resets all dot1x parameters to their default values
Sets the maximum number of times that the switch
retransmits an EAP request/identity packet to the client
before it times out the authentication session
Sets dot1x mode for a port interface
Allows single or multiple hosts on an dot1x port
Forces re-authentication on specific ports
Enables re-authentication for all ports
Sets the time that a switch port waits after the Max
Request Count has been exceeded before attempting to
acquire a new client
Sets the time period after which a connected client must
be re-authenticated
Sets the time period during an authentication session that
the switch waits before re-transmitting an EAP packet
Shows all dot1x related information
Authentication Commands
Mode
GC
GC
IC
IC
IC
PE
IC
IC
IC
IC
PE
4
Page
4-80
4-80
4-80
4-81
4-81
4-82
4-82
4-83
4-83
4-84
4-84
4-79
Advertisement
Table of Contents
