Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

dot1x port-controlChapter 2Catalyst 3750-E and 3560-E Switch Cisco IOS Commands• Dynamic-access ports—If you try to enable IEEE 802.1x authentication on a dynamic-access(VLAN Query Protocol [VQP]) port, an error message appears, and IEEE 802.1x authentication isnot enabled. If you try to change an IEEE 802.1x-enabled port to dynamic VLAN assignment, anerror message appears, and the VLAN configuration is not changed.• EtherChannel port—Do not configure a port that is an active or a not-yet-active member of anEtherChannel as an IEEE 802.1x port. If you try to enable IEEE 802.1x authentication on anEtherChannel port, an error message appears, and IEEE 802.1x authentication is not enabled.• Switched Port Analyzer (SPAN) and Remote SPAN (RSPAN) destination ports—You can enableIEEE 802.1x authentication on a port that is a SPAN or RSPAN destination port. However,IEEE 802.1x authentication is disabled until the port is removed as a SPAN or RSPAN destination.You can enable IEEE 802.1x authentication on a SPAN or RSPAN source port.To globally disable IEEE 802.1x authentication on the switch, use the no dot1x system-auth-controlglobal configuration command. To disable IEEE 802.1x authentication on a specific port or to return tothe default setting, use the no dot1x port-control interface configuration command.ExamplesThis example shows how to enable IEEE 802.1x authentication on a port:Switch(config)# interface gigabitethernet2/0/1Switch(config-if)# dot1x port-control autoYou can verify your settings by entering the show dot1x [interface interface-id] privileged EXECcommand.Related Commands Command Descriptionshow dot1x [interface interface-id] Displays IEEE 802.1x status for the specified port.2-172Catalyst 3750-E and 3560-E Switch Command ReferenceOL-9776-08