Page 302
Not approved by Document Control. For review only.
Allied Telesis
Command Line Interface User’s Guide
no dot1x system-auth-control
Default Configuration
802.1x is disabled globally.
Command Modes
Global Configuration mode
User Guidelines
There are no user guidelines for this command.
Example
The following example enables 802.1x globally.
dot1x port-control
The dot1x port-control Interface Configuration mode command enables manually controlling the authorization
state of the port. Use the no form of this command to return to the default configuration.
Syntax
dot1x port-control {auto | force-authorized | force-unauthorized}
no dot1x port-control
Parameters
•
auto — Enables 802.1X authentication on the interface and causes the port to transition to the authorized or
unauthorized state based on the 802.1X authentication exchange between the port and the client.
• force-authorized — Disables 802.1X authentication on the interface and causes the port to transition to the
authorized state without any authentication exchange required. The port resends and receives normal traffic
without 802.1X-based authentication of the client.
• force-unauthorized — Denies all access through this interface by forcing the port to transition to the
unauthorized state and ignoring all attempts by the client to authenticate. The device cannot provide
authentication services to the client through the interface.
Default Configuration
Port is in the force-authorized state
Command Mode
Interface Configuration (Ethernet)
User Guidelines
It is recommended to disable spanning tree or to enable spanning-tree PortFast mode on 802.1x edge ports (ports
in auto state that are connected to end stations), in order to get immediately to the forwarding state after
successful authentication.
Console(config)#
dot1x system-auth-control
To Next Page
Loading...
Need help?
General
