Quick Reference Guide

Security Commands | 191
Mode
Interface Config; Interface Range, which is indicated by the (conf-if-range-interface)# prompt, such as
(conf-if-range-vlan 10-20)#.
Command
History
dot1x port-control all
This command sets the authentication mode to be used on all ports. The control mode may be one of
the following.
Force-unauthorized—The authenticator PAE unconditionally sets the controlled port to unauthorized.
Force-authorized—The authenticator PAE unconditionally sets the controlled port to authorized.
Auto—The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication
exchanges between the supplicant, authenticator and the authentication server.
Syntax
dot1x port-control all {force-unauthorized | force-authorized | auto}
no dot1x port-control all sets the authentication mode to be used on all ports to auto.
Default
auto
Mode
Global Config
dot1x re-authenticate
This command begins the re-authentication sequence on the specified port. This command is only valid
if the control mode for the specified port is 'auto'. If the control mode is not 'auto' an error will be
returned.
Syntax
dot1x re-authenticate unit/slot/port
Mode
Global Config
Command
History
dot1x re-authentication
This command enables re-authentication of the supplicant for the specified port.
The no version of this command disables re-authentication of the supplicant for the specified port.
Syntax
dot1x re-authentication
Version 2.3 Interface Range mode added
Related
Commands
interface range Defines an interface range and accesses the Interface Range mode
Version 2.3 Modified: Moved from Privileged Exec mode to Global Config mode.