Users Guide

Security Commands 1077
When configuring an interface for both a data and voice device, set the max-
users limit to 3 if the voice device first authenticates or otherwise uses the
data VLAN prior to switching over to the voice VLAN.
Command History
Syntax updated in version 6.6 firmware.
Example
The following example configures an interface for a data and voice device.
The voice device is a typical IP phone that utilizes the data VLAN to obtain
configuration via HTTP prior to authenticating onto the voice VLAN.
console(config)#authentication max-users 3
authentication port-control
Use the authentication port-control command in Interface Configuration
mode to configure the 802.1x mode of authentication on the port. Use the no
form of the command to return the mode to the default.
Syntax
authentication port-control {force-authorized | force-unauthorized | auto}
no authentication port-control
• auto — Enables 802.1x authentication on the interface and causes the
port to transition to the authorized or unauthorized state based on the
802.1x authentication exchange between the switch and the client. Once
the first data client is authenticated, any other clients on the interface
have access to the data VLAN. This is equivalent to IEEE 802.1X port-
based mode. VLAN assignment is allowed on the port if it is not
configured in trunk mode. This is the default port-control authentication
method.
• force-authorized — Disables 802.1x authentication on the interface and
causes the port to transition to the authorized state without any
authentication exchange required. The port sends and receives normal
traffic without 802.1x-based authentication of the client. VLAN
assignment is not supported in this mode.