Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Dell PowerEdge FN I/O Module Configuration Guide 9.10(0.0)

PDF

Forcibly Authorizing or Unauthorizing a Port

IEEE 802.1X requires that a port can be manually placed into any of three states:

  • ForceAuthorized — an authorized state. A device connected to this port in this state is never subjected to the authentication process, but is allowed to communicate on the network. Placing the port in this state is same as disabling 802.1X on the port.
  • ForceUnauthorized — an unauthorized state. A device connected to a port in this state is never subjected to the authentication process and is not allowed to communicate on the network. Placing the port in this state is the same as shutting down the port. Any attempt by the supplicant to initiate authentication is ignored.
  • Auto — an unauthorized state by default. A device connected to this port in this state is subjected to the authentication process. If the process is successful, the port is authorized and the connected device can communicate on the network. All ports are placed in the Auto state by default.

To set the port state, use the following command.

Place a port in the Force Authorized, Force Unauthorized, or Auto state. INTERFACE mode dot1x port-control {force-authorized | force-unauthorized | auto} The default state is auto.

Example of Placing a Port in Force-Authorized State and Viewing the Configuration

The example shows configuration information for a port that has been force-authorized.

The bold line shows the new port-control state.

Dell(conf-if-gi-2/1)#dot1x port-control force-authorized
                                 Dell(conf-if-gi-2/1)#do show dot1x interface gigabitethernet 2/1
                                 
                                 802.1x information on Gi 2/1:
                                 -----------------------------
                                 Dot1x Status:       Enable
                                 
                                 Port Control:    FORCE_AUTHORIZED
                                 Port Auth Status:   UNAUTHORIZED
                                 Re-Authentication:  Disable
                                 Untagged VLAN id:   None
                                 Tx Period:          90 seconds
                                 Quiet Period:       120 seconds
                                 ReAuth Max:         2
                                 Supplicant Timeout: 30 seconds
                                 Server Timeout:     30 seconds
                                 Re-Auth Interval:   3600 seconds
                                 Max-EAP-Req:        10
                                 Auth Type:          SINGLE_HOST
                                 
                                 Auth PAE State:     Initialize
                                 Backend State:      Initialize
                                 Auth PAE State:     Initialize
                                 Backend State:      Initialize
                              

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\