2-102
Catalyst 2950 and Catalyst 2955 Switch Command Reference
OL-10102-01
Chapter 2 Catalyst 2950 and 2955 Cisco IOS Commands
dot1x port-control
• Dynamic-access ports—If you try to enable IEEE 802.1x authentication on a dynamic-access
(VLAN Query Protocol [VQP]) port, an error message appears, and IEEE 802.1x authentication is
not enabled. If you try to change an IEEE 802.1x-enabled port to dynamic VLAN assignment, an
error message appears, and the VLAN configuration is not changed.
• EtherChannel port—Do not configure a port that is an active or a not-yet-active member of an
EtherChannel as an IEEE 802.1x port. If you try to enable IEEE 802.1x authentication on an
EtherChannel port, an error message appears, and IEEE 802.1x authentication is not enabled.
• Switched Port Analyzer (SPAN) destination port—You can enable IEEE 802.1x authentication on a
SPAN source port but not on a SPAN destination port.
To disable IEEE 802.1x authentication globally on the switch, use the no dot1x system-auth-control
global configuration command. To disable IEEE 802.1x authentication on a specific interface, use the
no dot1x port-control interface configuration command.
Examples This example shows how to enable IEEE 802.1x authentication on an interface:
Switch(config)# interface fastethernet0/1
Switch(config-if)# dot1x port-control auto
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Related Commands Command Description
show dot1x [interface interface-id] Displays IEEE 802.1x status for the specified interface.
To Next Page
Loading...
Need help?
General
