Specifications

2-57
Catalyst 2950 and Catalyst 2955 Switch Command Reference
78-15304-01
Chapter 2 Cisco IOS Commands
dot1x port-control
• Secure port—For switches running the EI, if you try to enable 802.1X on a secure port without
enabling the multiple-hosts mode, the switch returns an error message, and 802.1X is not enabled.
If you try to change an 802.1X-enabled port to a secure port without enabling the multiple-hosts
mode, the switch returns an error message, and the security settings are not changed.
• Switched Port Analyzer (SPAN) destination port—You can enable 802.1X on a port that is a SPAN
destination port; however, 802.1X is disabled until the port is removed as a SPAN destination. You
can enable 802.1X on a SPAN source port.
To globally disable 802.1X on the switch, you must disable it on each port. There is no global
configuration command for this task.
Examples This example shows how to enable 802.1X on Fast Ethernet interface 0/1:
Switch(config)# interface fastethernet0/1
Switch(config-if)# dot1x port-control auto
You can verify your settings by entering the show dot1x privileged EXEC command and checking the
Status column in the 802.1X Port Summary section of the output. An enabled status means the
port-control value is set either to auto or to force-unauthorized.
Related Commands Command Description
show dot1x Displays 802.1X statistics, administrative status, and operational status for
the switch or for the specified interface.