Users Guide

Security Commands 1078
• force-unauthorized — Denies all access through this interface by forcing
the port to transition to the unauthorized state, ignoring all attempts by
the client to authenticate. The switch cannot provide authentication
services to the client through the interface. VLAN assignment is not
supported in this mode.
Default Configuration
The default port-control mode is auto (N1100, N1500, N2000, N2100,
N3000E, N3100 switch models). The default port-control mode is force-
authorized (N2200, N3200 switch models).
Command Mode
Interface Configuration (Ethernet) mode
User Guidelines
Interface configuration takes precedence over the global port-control setting.
It is recommended that you disable spanning tree or enable spanning-tree
portfast mode on 802.1x edge ports (ports in auto state that are connected to
end stations) in order to go immediately to the forwarding state after
successful authentication. Edge ports are ports connected to end stations that
do not forward traffic to other stations and do not participate in spanning-
tree.
Command History
Syntax added in version 6.6 firmware.
Example
The following command disables authentication on port 1/0/2
console(config)# interface gigabitethernet 1/0/2
console(config-if-Gi1/0/2)# dot1x port-control force-unauthorized
The following example configures an interface to ignore 802.1x
authentication messages and allow access to the network.
console(config-if-Gi1/0/1)# authentication port-control force-authorized