Example of Configuring and Verifying Port AuthenticationThe following example shows configuration information for a port for which the authenticator re-transmits an EAP Request Identity frame:• after 90 seconds and a maximum of 10 times for an unresponsive supplicant• re-transmits an EAP Request Identity frameThe bold lines show the new re-transmit interval, new quiet period, and new maximum re-transmissions.FTOS(conf-if-range-Te-2/1)#dot1x tx-period 90FTOS(conf-if-range-Te-2/1)#dot1x max-eap-req 10FTOS(conf-if-range-Te-2/1)#dot1x quiet-period 120FTOS#show dot1x interface TenGigabitEthernet 2/1802.1x information on Te 2/1:-----------------------------Dot1x Status: EnablePort Control: AUTOPort Auth Status: UNAUTHORIZEDRe-Authentication: DisableUntagged VLAN id: NoneTx Period: 90 secondsQuiet Period: 120 secondsReAuth Max: 2Supplicant Timeout: 30 secondsServer Timeout: 30 secondsRe-Auth Interval: 3600 secondsMax-EAP-Req: 10Auth Type: SINGLE_HOSTAuth PAE State: InitializeBackend State: InitializeForcibly Authorizing or Unauthorizing a PortIEEE 802.1X requires that a port can be manually placed into any of three states:• ForceAuthorized — an authorized state. A device connected to this port in this state is neversubjected to the authentication process, but is allowed to communicate on the network. Placing theport in this state is same as disabling 802.1X on the port.• ForceUnauthorized — an unauthorized state. A device connected to a port in this state is neversubjected to the authentication process and is not allowed to communicate on the network. Placingthe port in this state is the same as shutting down the port. Any attempt by the supplicant to initiateauthentication is ignored.• Auto — an unauthorized state by default. A device connected to this port in this state is subjected tothe authentication process. If the process is successful, the port is authorized and the connecteddevice can communicate on the network. All ports are placed in the Auto state by default.To set the port state, use the following command.• Place a port in the ForceAuthorized, ForceUnauthorized, or Auto state.INTERFACE modedot1x port-control {force-authorized | force-unauthorized | auto}The default state is auto.88 802.1X
