Intel SBCEGBESW10 CLI Switch User Manual


 
802.1x Commands
Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide 385
Syntax
dot1x port-control {auto | force-authorized | force-unauthorized}
no dot1x port-control
Parameters
auto — Enables 802.1x authentication on the interface and causes the port to
transition to the authorized or unauthorized state based on the 802.1x
authentication exchange between the port and the client.
force-authorized — Disables 802.1x authentication on the interface and
causes the port to transition to the authorized state without any authentication
exchange required. The port resends and receives normal traffic without
802.1x-based authentication of the client.
force-unauthorized — Denies all access through this interface by forcing the
port to transition to the unauthorized state and ignoring all attempts by the
client to authenticate. The device cannot provide authentication services to the
client through the interface.
Default Configuration
Port is in the force-authorized state
Command Mode
Interface Configuration (Ethernet)
User Guidelines
It is recommended to disable spanning tree or to enable spanning-tree PortFast mode on
802.1x edge ports (ports in
auto state that are connected to end stations), in order to get
immediately to the forwarding state after successful authentication.
Example
The following example enables 802.1x authentication on Ethernet port 16.
Console(config)# interface ethernet ext.16
Console(config-if)# dot1x port-control auto