3com 3CRUS2475 Manuale Utente

■

auto — Enables 802.1x authentication on the interface and causes 
the port to transition to the authorized or unauthorized state based 
on the 802.1x authentication exchange between the port and the 
client.

■

force-authorized — Disables 802.1x authentication on the interface 
and causes the port to transition to the authorized state without any 
authentication exchange required. The port resends and receives 
normal traffic without 802.1x-based authentication of the client.

■

force-unauthorized — Denies all access through this interface by 
forcing the port to transition to the unauthorized state and ignoring 
all attempts by the client to authenticate. The device cannot provide 
authentication services to the client through the interface.

Port is in the force-authorized state

Interface Configuration (Ethernet) mode

It is recommended to disable spanning tree or to enable spanning-tree 
PortFast mode on 802.1x edge ports (ports in auto state that are 
connected to end stations), in order to get immediately to the forwarding 
state after successful authentication. 

The following example enables 802.1x authentication on Ethernet port 
16.

The dot1x re-authentication Interface Configuration mode command 
enables periodic re-authentication of the client. To restore the default 
configuration, use the no form of this command.

Console(config)# interface ethernet 16

Console(config-if)# dot1x port-control auto