Users Guide

● Place a port in the auto, force-authorized (default), or force-unauthorized state in INTERFACE mode.
dot1x port-control {auto | force-authorized | force-unauthorized}
Configure and verify force-authorized state
OS10(conf-range-eth1/1/7-1/1/8)# dot1x port-control force-authorized
OS10(conf-range-eth1/1/7-1/1/8)# do show dot1x interface ethernet 1/1/7
802.1x information on ethernet1/1/7
-------------------------------------
Dot1x Status: Enable
Port Control: AUTHORIZED
Port Auth Status: UNAUTHORIZED
Re-Authentication: Enable
Tx Period: 120 seconds
Quiet Period: 120 seconds
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 5
Host Mode: MULTI_HOST
Auth PAE State: Initialize
Backend State: Initialize
View interface running configuration
OS10(conf-range-eth1/1/7-1/1/8)# do show running-configuration interface
...
!
interface ethernet1/1/7
no shutdown
dot1x max-req 5
dot1x re-authentication
dot1x timeout quiet-period 120
dot1x timeout tx-period 120
!
interface ethernet1/1/8
no shutdown
dot1x max-req 5
dot1x re-authentication
dot1x timeout quiet-period 120
dot1x timeout tx-period 120
...
Reauthenticate a port
Configures the time period for reauthentication. After the supplicant is authenticated and the port is authorized, configure
the authenticator to reauthenticate the supplicant. If you enable reauthentication, the supplicant reauthenticates every 3600
seconds.
● Reauthenticate the supplicant in INTERFACE mode, from 1 to 65535, default 3600.
dot1x timeout re-authperiod seconds
Configure and verify reauthentication time period
OS10(config)# interface range ethernet 1/1/7-1/1/8
OS10(conf-range-eth1/1/7-1/1/8)# dot1x re-authentication
OS10(conf-range-eth1/1/7-1/1/8)# dot1x timeout re-authperiod 3600
OS10(conf-range-eth1/1/7-1/1/8)# show dot1x interface ethernet 1/1/7
802.1x information on ethernet1/1/7
-------------------------------------
Dot1x Status: Enable
Port Control: AUTHORIZED
Port Auth Status: UNAUTHORIZED
Re-Authentication: Enable
436
Layer 2