3 dot1x port-control – CANOGA PERKINS CanogaOS Command Reference User Manual

Page 710

Advertising
background image

CanogaOS Command Line Reference

Revision 1.02

Proprietary & Confidential Canoga Pertkins Metro Ethernet Switches

Page 710 of 855


Command Mode

Interface configuration


Usage

You should change the default value of this command only to adjust for unusual circumstances such as
unreliable links or specific behavioral problems with certain clients and authentication servers.


Examples

The following is sample output from the dot1x max-reauth-req command:
Switch(config-if)# dot1x max-reauth-req 4


Related Commands

show dot1x

37.3 dot1x port-control

Use the dot1x port-control interface configuration command on the switch to enable manual control
of the authorization state of the port. Use the no form of this command to return to the default setting.


Command Syntax

dot1x port-control {auto | force-authorized | force-unauthorized | dir {both | in}}
no dot1x port-control

auto

Enable IEEE 802.1x authentication on the port and cause the port to
change to the authorized or unauthorized state based on the IEEE
802.1x authentication exchange between the switch and the client.

force-authorized

Disable IEEE 802.1x authentication on the port and cause the port to
transition to the authorized state without an authentication exchange.
The port sends and receives normal traffic without IEEE
802.1x-based authentication of the client.

force-unauthorized

Deny all access through this port by forcing the port to change to the
unauthorized state, ignoring all attempts by the client to authenticate.
The switch cannot provide authentication services to the client
through the port.

dir {both | in}

Specify the dot1x control direction.

both

Discard received and transmitted packets.

in

Discard received packets only.


Default

The default is force-authorized.


Command Mode

Advertising