CLI Guide

Security Commands 1111
Default Configuration
The switch remains in the quiet state for 90 seconds.
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
It is recommended that the user set the dot1x timeout guest-vlan-period to at
least three times the dot1x timeout tx-period timer so that at least three EAP
Requests are sent, before assuming that the client is an 802.1X unaware
client. An 802.1X unaware client is one that does not respond to EAP-
Request/Identity frames and does not send EAPOL-Start or EAP-
Response/Identity frames.
Example
The following example sets the 802.1X timeout guest vlan period to 100
seconds.
console(config)# dot1x timeout guest-vlan-period 100
authentication event fail
Use the authentication event fail command in Interface Configuration mode
to specify the unauthenticated VLAN on a port. The VLAN must be defined
prior to use. The no form of the command sets the unauthenticated VLAN
ID to zero, which disables the authenticated VLAN on a port.
Syntax
authentication event fail action authorize vlan vlan-id
no authentication event fail action authorize vlan
• vlan-id — The ID of a valid VLAN to use for unauthenticated clients
(Range: 1-4093).
Default Configuration
The unauthenticated VLAN is disabled on the interface by default.