HP Cisco Catalyst Blade Switch 3020 Cisco Catalyst Blade Switch 3020 for HP Co - Page 91

Chapter 2 Cisco Catalyst Blade Switch 3020 for HP Cisco IOS Commands dot1x critical (global configuration) dot1x critical (global configuration) Use the dot1x critical global configuration command on a standalone switch to configure the parameters for the inaccessible authentication bypass feature, also referred to as critical authentication or the authentication, authorization, and accounting (AAA) fail policy. To return to default settings, use the no form of this command. dot1x critical {eapol | recovery delay milliseconds} no dot1x critical {eapol | recovery delay} Syntax Description eapol recovery delay milliseconds Specify that the switch sends an EAPOL-Success message when the switch puts the critical port in the critical-authentication state. Set the recovery delay period in milliseconds. The range is from 1 to 10000 milliseconds. Defaults The switch does not send an EAPOL-Success message to the host when the switch successfully authenticates the critical port by putting the critical port in the critical-authentication state. The recovery delay period is 1000 milliseconds (1 second). Command Modes Global configuration Command History Release 12.2(25)SEE 12.2(25)SEF Modification This command was introduced. This command was introduced. Usage Guidelines Use the eapol keyword to specify that the switch sends an EAPOL-Success message when the switch puts the critical port in the critical-authentication state. Use the recovery delay milliseconds keyword to set the recovery delay period during which the switch waits to re-initialize a critical port when a RADIUS server that was unavailable becomes available. The default recovery delay period is 1000 milliseconds. A port can be re-initialized every second. To enable inaccessible authentication bypass on a port, use the dot1x critical interface configuration command. To configure the access VLAN to which the switch assigns a critical port, use the dot1x critical vlan vlan-id interface configuration command. Examples This example shows how to set 200 as the recovery delay period on the switch: Switch# dot1x critical recovery delay 200 You can verify your configuration by entering the show dot1x privileged EXEC command. OL-8916-01 Cisco Catalyst Blade Switch 3020 for HP Command Reference 2-63