So normal case when you (the switch) should authenticate something on the port you should always have "dot1x pae authen", right? But is this some kind of default-command, because in some examples I´ve found it is not included in the config. Does it work without it?
And what happens if I omit the "dot1x port-control auto"-command on a switchport? I havent got this home-dot1x-lab-thing rocking yet since I still have problem with my windows-pc talking EAP-MD5. Thats why I ask prior to try it myself... br jimmy 2010/2/14 Kingsley Charles <[email protected]> > Hi Jimmy > > dot1x pae, tells what mode should the interface be in. It can be either > supplicant or authenticator. > > dot1x pae supplicant is used for making interface into supplicant. It is > used for testing purpose, where you don't have a dot1x client. > > "dot1x credentials dot1x-user" should be used to configure the credentials. > > > If the interface is an authenticator i.e., if dot1x pae authenticator is > configured, then "dot1x port-control auto" makes the interface state > according to the dot1x client connected to it. Initially it is un-authorized > and moved to authorized state after proper dotlx authorization. > > > > > With regards > Kings > > On Sun, Feb 14, 2010 at 2:51 AM, Jimmy Larsson <[email protected]> wrote: > >> Hi again >> >> I try to understand how these two interface-config-commands relates to >> eachother. Whats the difference between them, when is the first needed, when >> the second, and when/why both? >> >> interface yadayada/1 >> dot1x pae authenticator >> dot1x port-control auto >> ! >> >> Thanks in advance! >> >> Br Jimmy >> >> -- >> ------- >> Jimmy Larsson >> Ryavagen 173 >> s-26030 Vallakra >> Sweden >> http://blogg.kvistofta.nu >> ------- >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> > -- ------- Jimmy Larsson Ryavagen 173 s-26030 Vallakra Sweden http://blogg.kvistofta.nu -------
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
