Dell N3200-ON EMC Networking N-Series Switches CLI Reference Guide version 6.6 - Page 1072

dot1x port-control Use the dot1x port-control command in Interface Configuration mode to configure the 802.1x mode of authentication on the port. Use the no form of the command to return the mode to the default. Syntax dot1x port-control {force-authorized | force-unauthorized | auto | macbased} no dot1x port-control • auto - Enables 802.1x authentication on the interface and causes the port to transition to the authorized or unauthorized state based on the 802.1x authentication exchange between the switch and the client. Once the first data client is authenticated, any other clients on the interface have access to the data VLAN. This is equivalent to IEEE 802.1X portbased mode. VLAN assignment is allowed on the port if it is not configured in trunk mode. This is the default port-control authentication method. • force-authorized - Disables 802.1x authentication on the interface and causes the port to transition to the authorized state without any authentication exchange required. The port sends and receives normal traffic without 802.1x-based authentication of the client. VLAN assignment is not supported in this mode. • force-unauthorized - Denies all access through this interface by forcing the port to transition to the unauthorized state, ignoring all attempts by the client to authenticate. The switch cannot provide authentication services to the client through the interface. VLAN assignment is not supported in this mode. • mac-based - Enables 802.1x authentication on the interface and allows multiple hosts to individually authenticate on a single port. The hosts are distinguished by their MAC addresses and each host must authenticate independently. VLAN assignment per host is allowed on the port if it is configured in General mode. Security Commands 1072