2-48
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
authentication port-control
• EtherChannel port—Do not configure a port that is an active or a not-yet-active member of an
EtherChannel as an port. If you try to enable authentication on an EtherChannel port, an error
message appears, and authentication is not enabled.
• Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) destination ports—You can enable
authentication on a port that is a SPAN or RSPAN destination port. However, authentication is
disabled until the port is removed as a SPAN or RSPAN destination. You can enable authentication
on a SPAN or RSPAN source port.
To globally disable authentication on the switch, use the no dot1x system-auth-control global
configuration command. To disable authentication on a specific port or to return to the default setting,
use the no authentication port-control interface configuration command.
Examples This example shows how to set the port state to automatic:
Switch(config-if)# authentication port-control auto
This example shows how to set the port state to the force- authorized state:
Switch(config-if)# authentication port-control force-authorized
This example shows how to set the port state to the force-unauthorized state:
Switch(config-if)# authentication port-control force-unauthorized
You can verify your settings by entering the show authentication privileged EXEC command.
Related Commands Command Description
authentication
control-direction
Configures the port mode as unidirectional or bidirectional.
authentication event Sets the action for specific authentication events.
authentication
fallback
Configures a port to use web authentication as a fallback method for clients
that do not support IEEE 802.1x authentication.
authentication
host-mode
Sets the authorization manager mode on a port.
authentication open Enables or disables open access on a port.
authentication order Sets the order of the authentication methods used on a port.
authentication
periodic
Enables or disable reauthentication on a port.
authentication
priority
Adds an authentication method to the port-priority list.
authentication timer Configures the timeout and reauthentication parameters for an
802.1x-enabled port.
authentication
violation
Configures the violation modes that occur when a new device connects to a
port or when a new device connects to a port after the maximum number of
devices are connected to that port.
show authentication Displays information about authentication manager events on the switch.