536w w w . d e l l . c o m | s u p p o r t . d e l l . c o m console(config-if-1/g2)#dot1x max-users 3dot1x port-controlUse the dot1x port-control command in Interface Configuration mode to enable the IEEE802.1X operation on the port.Syntaxdot1x port-control {force-authorized | force-unauthorized | auto | mac-based}no dot1x port-control• auto — Enables 802.1X authentication on the interface and causes the port to transition tothe authorized or unauthorized state based on the 802.1X authentication exchange betweenthe switch and the client.• force-authorized — Disables 802.1X authentication on the interface and causes the port totransition to the authorized state without any authentication exchange required. The portsends and receives normal traffic without 802.1X-based authentication of the client.• force-unauthorized — Denies all access through this interface by forcing the port totransition to the unauthorized state, ignoring all attempts by the client to authenticate. Theswitch cannot provide authentication services to the client through the interface.• mac-based — Enables 802.1X authentication on the interface and allows multiple hosts toauthenticate on a single port. The hosts are distinguished by their MAC addresses.Default ConfigurationThe default configuration is auto.Command ModeInterface Configuration (Ethernet) modeUser GuidelinesIt is recommended that you disable the spanning tree or enable spanning-tree PortFast mode on802.1X edge ports (ports in auto state that are connected to end stations), in order to goimmediately to the forwarding state after successful authentication.When configuring a port to use MAC-based authentication, the port must be in switchportgeneral mode.ExampleThe following command enables MAC-based authentication on port 1/g2console(config)# interface ethernet 1/g2
