7.8.1.0 - Force10 Networks

To enable 802.1X:
Step Task Command Syntax Command Mode
1 Enable 802.1X globally. dot1x authentication CONFIGURATION
2 Enter INTERFACE mode on an interface or a range of
interfaces.
Verify that 802.1X is enabled globally and at interface level using the command show running-config |
find dot1x from EXEC Privilege mode, as shown in Figure 41.
Figure 41 Verifying 802.1X Global Configuration
Force10#show running-config | find dot1x
dot1x authentication
!
[output omitted]
!
interface GigabitEthernet 2/1
ip address 2.2.2.2/24
dot1x authentication
no shutdown
!
interface GigabitEthernet 2/2
ip address 1.0.0.1/24
dot1x authentication
no shutdown
--More--
802.1X Enabled
802.1X Enabled on
View 802.1X configuration information for an interface using the command show dot1x interface, as
shown in Figure 42.
Figure 42 Verifying 802.1X Interface Configuration
Force10#show dot1x interface gigabitethernet 2/1
802.1x information on Gi 2/1:
-----------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: UNAUTHORIZED
Re-Authentication: Disable
Untagged VLAN id: None
Tx Period: 30 seconds
Quiet Period: 60 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 2
Auth Type: SINGLE_HOST
Auth PAE State: Initialize
Backend State: Initialize
interface [range] INTERFACE
3 Enable 802.1X on an interface or a range of interfaces. dot1x authentication INTERFACE
802.1X Enabled on
All ports unauthorized by default
86 802.1X