Users Guide

Security Commands 1071
This command limits the number of times an EAP-Request is sent without
receiving an EAP-Response. EAP-Requests are sent during the 802.1X
authentication process to 802.1X aware hosts. Use the dot1x max-reauth-req
command to limit the number of repeated EAP Request/Identity messages.
Example
The following example sets the number of times that the switch sends an
EAP-request frame for which no EAP-Response is received to 6.
console(config)# interface gigabitethernet 1/0/16
console(config-if-Gi1/0/16)# dot1x max-req 6
dot1x pae
Use this command to enable 802.1X on an interface and set the interface role.
Syntax
dot1x pae authenticator
• authenticator—Set the port role as an 802.1X authenticator.
Default Configuration
The default role is authenticator.
Command Mode
Interface (Ethernet) Configuration mode
User Guidelines
This command has no user guidelines.
Command History
Command introduced in version 6.6 firmware.
Example
This command sets the 802.1X port role to authenticator on interface
Gi1/0/3.
console(config-if-Gi1/0/3)#dot1x pae authenticator