Change the Authentication Status of a Port

The switch authorizes ports by default, which means that the ports are always authorized and are not authenticated by the RADIUS server.

You can also make the ports controlled so that they are dependent on being authorized by the Radius Server when you globally enable EAP (auto).

Procedure

  1. Enter GigabitEthernet Interface Configuration mode:

    enable

    configure terminal

    interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]}

    Note

    Note

    If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.

  2. Configure the authorization status of a port:

    eapol status {authorized|auto}

Example

Configure the authorization status of a port:

Switch:1>enable
Switch:1#configure terminal
Switch:1(config)#interface GigabitEthernet 1/1
Switch:1(config-if)#eapol status auto

Variable Definitions

The following table defines parameters for the eapol status command.

Variable

Value

authorized

Specifies that the port is always authorized. The default value is authorized.

auto

Specifies that port authorization depends on the results of the EAP authentication by the RADIUS server. The default value is authorized.
9039040-00 Rev AB