On Tue, Feb 16, 2010 at 12:48 PM, Kingsley Charles < [email protected]> wrote:
> I am not sure, what is the default but safer side, you can always configure > auto > > > On Tue, Feb 16, 2010 at 2:23 AM, Jimmy Larsson <[email protected]> wrote: > >> So normal case when you (the switch) should authenticate something on the >> port you should always have "dot1x pae authen", right? But is this some kind >> of default-command, because in some examples I´ve found it is not included >> in the config. Does it work without it? >> >> And what happens if I omit the "dot1x port-control auto"-command on a >> switchport? >> >> I havent got this home-dot1x-lab-thing rocking yet since I still have >> problem with my windows-pc talking EAP-MD5. Thats why I ask prior to try it >> myself... >> >> br jimmy >> >> >> >> >> 2010/2/14 Kingsley Charles <[email protected]> >> >> Hi Jimmy >>> >>> dot1x pae, tells what mode should the interface be in. It can be either >>> supplicant or authenticator. >>> >>> dot1x pae supplicant is used for making interface into supplicant. It is >>> used for testing purpose, where you don't have a dot1x client. >>> >>> "dot1x credentials dot1x-user" should be used to configure the >>> credentials. >>> >>> >>> If the interface is an authenticator i.e., if dot1x pae authenticator is >>> configured, then "dot1x port-control auto" makes the interface state >>> according to the dot1x client connected to it. Initially it is un-authorized >>> and moved to authorized state after proper dotlx authorization. >>> >>> >>> >>> >>> With regards >>> Kings >>> >>> On Sun, Feb 14, 2010 at 2:51 AM, Jimmy Larsson <[email protected]>wrote: >>> >>>> Hi again >>>> >>>> I try to understand how these two interface-config-commands relates to >>>> eachother. Whats the difference between them, when is the first needed, >>>> when >>>> the second, and when/why both? >>>> >>>> interface yadayada/1 >>>> dot1x pae authenticator >>>> dot1x port-control auto >>>> ! >>>> >>>> Thanks in advance! >>>> >>>> Br Jimmy >>>> >>>> -- >>>> ------- >>>> Jimmy Larsson >>>> Ryavagen 173 >>>> s-26030 Vallakra >>>> Sweden >>>> http://blogg.kvistofta.nu >>>> ------- >>>> >>>> _______________________________________________ >>>> For more information regarding industry leading CCIE Lab training, >>>> please visit www.ipexpert.com >>>> >>>> >>> >> >> >> -- >> ------- >> Jimmy Larsson >> Ryavagen 173 >> s-26030 Vallakra >> Sweden >> http://blogg.kvistofta.nu >> ------- >> > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
