CTS FOS-3128 Series - Page 39

39
Show command
Switch(config)# show dot1x
Show 802.1X system configuration.
Switch(config)# show dot1x
interface
Show each interface’s 802.1X
configuration.
Switch(config)# show dot1x
interface [port_list]
[port_list]
Show the specified interfaces’
802.1X configuration.
Switch(config)# show dot1x
statistics
Show each port’s 802.1X statistics.
Switch(config)# show dot1x
statistics [port_list]
[port_list]
Show the specified interfaces’
802.1X statistics.
Switch(config)# show dot1x
status
Show all ports’ 802.1X status.
Switch(config)# show dot1x
status [port_list]
[port_list]
Show the specified interfaces’
802.1X status.
Examples of Dot1x command
Switch(config)# dot1x
Enable IEEE 802.1X function.
Switch(config)# dot1x reauthentication
Enable auto reauthentication
function of the system.
Switch(config)# dot1x secret agagabcxyz
Set up the shared secret to
“agagabcxyz”.
Switch(config)# dot1x server 192.168.1.10
Set up the RADIUS authentication
server IP address to 192.168.1.10.
Use “Interface” command to configure a group of ports’ IEEE 802.1x settings.
Dot1x & Interface command
Parameter
Description
Switch(config)# interface [port_list]
[port_list]
Enter several discontinuous port
numbers separated by commas or a
range of ports with a hyphen. For
example:1,3 or 2-4.
Switch(config-if-PORT-PORT)#
dot1x port-control [auto |
unauthorized]
[auto |
unauthorized]
Specify the 802.1X port type “auto”,
“authorized” or “unauthorized” to the
selected ports.
“auto”: This requires 802.1X-aware
clients to be authorized by the
authentication server. Accesses
from clients that are not dot1x aware
will be denied.
“authorized”: This forces the
Managed Switch to grant access to
all clients, both 802.1X-aware and
802.1x-unaware. No authentication
exchange is required. By default, all
ports are set to “authorized”.
“unauthorized”: This forces the
Managed Switch to deny access to
all clients, neither 802.1X-aware nor
802.1X-unaware.