3 dot1x port-control – CANOGA PERKINS CanogaOS Command Reference User Manual
Page 710

CanogaOS Command Line Reference
Revision 1.02
Proprietary & Confidential Canoga Pertkins Metro Ethernet Switches
Page 710 of 855
 
Command Mode 
Interface configuration
 
Usage 
You should change the default value of this command only to adjust for unusual circumstances such as 
unreliable links or specific behavioral problems with certain clients and authentication servers. 
 
Examples 
The following is sample output from the dot1x max-reauth-req command: 
Switch(config-if)# dot1x max-reauth-req 4 
 
Related Commands 
show dot1x
37.3 dot1x port-control
Use the dot1x port-control interface configuration command on the switch to enable manual control 
of the authorization state of the port. Use the no form of this command to return to the default setting. 
 
Command Syntax 
dot1x port-control {auto | force-authorized | force-unauthorized | dir {both | in}} 
no dot1x port-control 
auto
Enable IEEE 802.1x authentication on the port and cause the port to 
change to the authorized or unauthorized state based on the IEEE 
802.1x authentication exchange between the switch and the client. 
force-authorized
Disable IEEE 802.1x authentication on the port and cause the port to 
transition to the authorized state without an authentication exchange. 
The port sends and receives normal traffic without IEEE 
802.1x-based authentication of the client. 
force-unauthorized
Deny all access through this port by forcing the port to change to the 
unauthorized state, ignoring all attempts by the client to authenticate. 
The switch cannot provide authentication services to the client 
through the port. 
dir {both | in}
Specify the dot1x control direction.
both
Discard received and transmitted packets.
in
Discard received packets only.
 
Default 
The default is force-authorized.
 
Command Mode 
