dot1x authentication (Interface)
Enable dot1x on an interface. Enable dot1x both globally and at the interface level.
C-Series, E-Series TereaScale, S-Series, S4810
Syntax
ot1x authentication
To disable dot1x on an interface, use the no dot1x authentication command.
Defaults Disabled
Command Modes INTERFACE
Command History
Version 8.3.12.0 Introduced on the S4810.
Version 7.6.1.0 Introduced on the C-Series and S-Series.
Version 7.4.1.0 Introduced on the E-Series.
Related
Commands
dot1x authentication (Configuration)
dot1x guest-vlan
Configure a guest VLAN for limited access users or for devices that are not 802.1X capable.
C-Series, E-Series, S-Series, S4810
Syntax
dot1x guest-vlan vlan-id
To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command.
Parameters
vlan-id Enter the VLAN Identifier. The range is 1 to 4094.
Defaults Not configured.
Command Modes CONFIGURATION (
conf-if-interface-slot/port
)
Command History
Version 8.3.12.0 Introduced on the S4810.
Version 7.6.1.0 Introduced on the C-Series, E-Series, and S-Series.
Usage
Information
1X authentication is enabled when an interface is connected to the switch. If the host fails to
respond within a designated amount of time, the authenticator places the port in the guest
VLAN.
If a device does not respond within 30 seconds, it is assumed that the device is not 802.1X
capable. Therefore, a guest VLAN is allocated to the interface and authentication, for the
device, occurs at the next reauthentication interval (dot1x reauthentication).
199