802.1x Commands 517Syntax• dot1x port-control {auto | force-authorized | force-unauthorized}• no dot1x port-control• auto — Enables 802.1X authentication on the interface and causes the port to transition to theauthorized or unauthorized state based on the 802.1X authentication exchange between the portand the client.• force-authorized — Disables 802.1X authentication on the interface and causes the port totransition to the authorized state without any authentication exchange required. The port resendsand receives normal traffic without 802.1X-based authentication of the client.• force-unauthorized — Denies all access through this interface by forcing the port to transition tothe unauthorized state and ignoring all attempts by the client to authenticate. The device cannotprovide authentication services to the client through the interface.Default ConfigurationPort is in the force-authorized state.Command ModeInterface Configuration (Ethernet) mode.User Guidelines• It is recommended to disable Spanning Tree or to enable spanning-tree PortFast mode on 802.1x edgeports (ports in auto state that are connected to end stations), in order to get immediately to theforwarding state after successful authentication.ExamplesThe following example enables 802.1X authentication on Ethernet port 1/e16.dot1x re-authenticationThe dot1x re-authentication Interface Configuration mode command enables periodicre-authentication of the client. Use the no form of this command to return to the default configuration.Syntax• dot1x re-authentication• no dot1x re-authenticationConsole(config)# interface ethernet 1/e16Console(config-if)# dot1x port-control autobook.book Page 517 Thursday, December 18, 2008 7:40 PM
