Reference Guide

802.1x Commands 451
ADVANCED FEATURES
dot1x auth-not-req
The dot1x auth-not-req Interface Configuration mode command enables unauthorized devices
access to the VLAN. To disable access to the VLAN, use the no form of this command.
Syntax
dot1x auth-not-req
no dot1x auth-not-req
Default Configuration
Access is enabled.
Command Mode
Interface Configuration (VLAN) mode
User Guidelines
• An access port cannot be a member in an unauthenticated VLAN.
• The native VLAN of a trunk port cannot be an unauthenticated VLAN.
• For a general port, the PVID can be an unauthenticated VLAN (although only tagged packets
would be accepted in the unauthorized state.)
Examples
The following example enables access to the VLAN to unauthorized devices.
EapolReqFramesTx The number of EAP Request frames (other than Rq/Id frames) that
have been transmitted by this Authenticator.
InvalidEapolFramesRx The number of EAPOL frames that have been received by this
Authenticator in which the frame type is not recognized.
EapLengthErrorFramesRx The number of EAPOL frames that have been received by this
Authenticator in which the Packet Body Length field is invalid.
LastEapolFrameVersion The protocol version number carried in the most recently received
EAPOL frame.
LastEapolFrameSource The source MAC address carried in the most recently received EAPOL
frame.
Console(config-if)# dot1x auth-not-req