CLI Guide

Security Commands 1081
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
Interface configuration takes precedence over the global port-control setting.
It is recommended that you disable spanning tree or enable spanning-tree
portfast mode on 802.1x edge ports (ports in auto state that are connected to
end stations) in order to go immediately to the forwarding state after
successful authentication. Edge ports are ports connected to end stations that
do not forward traffic to other stations and do not participate in spanning-
tree.
Command History
Syntax added in version 6.6 firmware.
Example
The following command disables authentication on port 1/0/2
console(config)# interface gigabitethernet 1/0/2
console(config-if-Gi1/0/2)# dot1x port-control force-unauthorized
The following example configures an interface to ignore 802.1x
authentication messages and allow access to the network.
console(config-if-Gi1/0/1)# authentication port-control force-authorized
authentication periodic
Use the authentication periodic command in Interface Configuration mode
to enable periodic re-authentication of the client. To return to the default
setting, use the no form of this command.
Syntax
authentication periodic
no authentication periodic