Specifications

Managing 802.1X on Wired Authentication Ports
19-2 Managing 802.1X on the RoamAbout Switch
Enabling and Disabling 802.1X Globally
Thefollowingcommandgloballyenablesordisables802.1Xauthenticationonallwired
authenticationportsonaRAS:
set dot1x authcontrol {enable | disable}
Thedefaultsettingisenable,whichpermits802.1Xauthenticationtooccurasdeterminedbythe
setdot1Xport‐controlcommandforeachwiredauthenticationport.Thedisablesettingforcesall
wiredauthenticationportstounconditionallyauthorizeall802.1Xauthenticationattempts by
userswithanEAPsuccessmessage.
Example
Toreenable802.1Xauthenticationonwiredauthenticationports,typethefollowingcommand:
RBT-8100# set dot1x authcontrol enable
success: dot1x authcontrol enabled.
Setting 802.1X Port Control
Thefollowingcommandspecifiesthewayawiredauthenticationportorgroupofportshandles
user802.1Xauthenticationattempts:
set dot1x port-control {forceauth | forceunauth | auto} port-list
Thedefaultsettingisauto,whichallowstheRAStoprocess802.1Xauthenticationnormally
accordingtotheauthenticationconfiguration.Alternatively,youcansetawiredauthentication
portorportstoeitherunconditionallyauthenticateorunconditionallyrejectallusers.
Examples
Thefollowingcommandforcesport 19tounconditionallyauthenticateall802.1Xauthentication
attemptswithanEAPsuccessmessage:
RBT-8100# set dot1x port-control forceauth 19
success: authcontrol for 19 is set to FORCE-AUTH.
Similarly,thefollowingcommandforcesport 12tounconditionallyrejectany802.1Xattempts
withanEAPfailuremessage:
RBT-8100# set dot1x port-control forceunauth 12
success: authcontrol for 12 is set to FORCE-UNAUTH.
Thesetdot1xport‐controlcommandisoverriddenbythesetdot1xauthcontrol command.The
cleardot1xport‐controlcommandreturnsportcontroltothedefaultautovalue.
Typethefollowingcommandtoresetportcontrolforallwiredauthenticationports:
RBT-8100# clear dot1x port-control
success: change accepted.