CLI Guide

Security Commands 950
Default Configuration
By default, hosts moved to the critical data VLAN are not moved back to the
port PVID when a RADIUS server becomes reachable.
Command Mode
Interface (Ethernet) Configuration mode
User Guidelines
When the alive action is configured to reinitialize, the switch triggers 802.1X
reauthentication of all authenticated hosts on the port. Hosts on the voice
VLAN, unauthenticated VLAN (authentication failed hosts) or guest VLAN
are not disturbed. During re-authentication, if all the servers are still dead,
the hosts are authenticated successfully into the critical data VLAN.
Command History
Syntax added in version 6.6 firmware.
Example
The following example configures an interface to support a critical data
VLAN (100) and to reauthenticate hosts when no RADIUS server is reachable
and again when at least one RADIUS server becomes reachable.
console(config)#vlan 100
console(config-vlan100)#interface gi1/0/1
console(config-if-Gi1/0/1)#authentication event server dead action
reinitialize vlan 100
console(config-if-Gi1/0/1)#authentication event server alive action
reinitialize
authentication open
Use the authentication open command to allow unauthenticated devices on
802.1X enabled interfaces access to network resources prior to authorization.
Syntax
authentication open
no authentication open