2-198
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
dot1x port-control
• Dynamic-access ports—If you try to enable IEEE 802.1x authentication on a dynamic-access
(VLAN Query Protocol [VQP]) port, an error message appears, and IEEE 802.1x authentication is
not enabled. If you try to change an IEEE 802.1x-enabled port to dynamic VLAN assignment, an
error message appears, and the VLAN configuration is not changed.
• EtherChannel port—Do not configure a port that is an active or a not-yet-active member of an
EtherChannel as an IEEE 802.1x port. If you try to enable IEEE 802.1x authentication on an
EtherChannel port, an error message appears, and IEEE 802.1x authentication is not enabled.
• Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) destination ports—You can enable
IEEE 802.1x authentication on a port that is a SPAN or RSPAN destination port. However,
IEEE 802.1x authentication is disabled until the port is removed as a SPAN or RSPAN destination.
You can enable IEEE 802.1x authentication on a SPAN or RSPAN source port.
To globally disable IEEE 802.1x authentication on the switch, use the no dot1x system-auth-control
global configuration command. To disable IEEE 802.1x authentication on a specific port or to return to
the default setting, use the no dot1x port-control interface configuration command.
Examples This example shows how to enable IEEE 802.1x authentication on a port:
Switch(config)# interface gigabitethernet2/0/1
Switch(config-if)# dot1x port-control auto
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Related Commands Command Description
show dot1x [interface interface-id] Displays IEEE 802.1x status for the specified port.
To Next Page
Loading...
Need help?
General
