Dot1x re-authenticate – Dell PowerEdge M805 User Manual

Page 333

Advertising
background image

802.1x Commands

317

auto — Enables 802.1x authentication on the interface and causes the port to transition
to the authorized or unauthorized state based on the 802.1x authentication exchange
between the switch and the client.

force-authorized — Disables 802.1x authentication on the interface and causes the port
to transition to the authorized state without any authentication exchange required. The
port resends and receives normal traffic without 802.1x-based authentication of the
client.

force-unauthorized — Denies all access through this interface by forcing the port to
transition to the unauthorized state, ignoring all attempts by the client to authenticate.
The switch cannot provide authentication services to the client through the interface.

Default Configuration

The default configuration is auto.

Command Mode

Interface Configuration (Ethernet) mode

User Guidelines

It is recommended that you disable the spanning tree or enable spanning-tree PortFast mode
on 802.1x edge ports (ports in auto state that are connected to end stations), in order to go
immediately to the forwarding state after successful authentication.

Example

The following example denies all access through the interface.

console(config)# interface ethernet 1/g16

console(config-if-1/g16)# dot1x port-control force-unauthorized

dot1x re-authenticate

Use the dot1x re-authenticate command in Privileged EXEC mode to enable manually initiating a
re-authentication of all 802.1x-enabled ports or the specified 802.1x-enabled port.

dot1x re-authenticate [ethernet interface]

interface —Specifies a valid interface number. The full syntax is unit/port.

Default Configuration

This command has no default configuration.

Command Mode

Privileged EXEC mode

Advertising