Dot1X Supplicant Controlled Transient - Cisco Catalyst 3650 series Command Reference Manual

dot1x supplicant controlled transient

To control access to an 802.1x supplicant port during authentication, use the dot1x supplicant controlled
transient command in global configuration mode. To open the supplicant port during authentication, use the
no form of this command
dot1x supplicant controlled transient
no dot1x supplicant controlled transient
Syntax Description
This command has no arguments or keywords.
Command Default
Access is allowed to 802.1x supplicant ports during authentication.
Command Modes
Global configuration
Command History
Release
Cisco IOS XE 3.3SECisco IOS XE 3.3SE
Cisco IOS XE Denali 16.3.1
Usage Guidelines
In the default state, when you connect a supplicant switch to an authenticator switch that has BPCU guard
enabled, the authenticator port could be error-disabled if it receives a Spanning Tree Protocol (STP) bridge
protocol data unit (BPDU) packets before the supplicant switch has authenticated. Beginning with Cisco IOS
Release 15.0(1)SE, you can control traffic exiting the supplicant port during the authentication period. Entering
the dot1x supplicant controlled transient global configuration command temporarily blocks the supplicant
port during authentication to ensure that the authenticator port does not shut down before authentication
completes. If authentication fails, the supplicant port opens. Entering the no dot1x supplicant controlled
transient global configuration command opens the supplicant port during the authentication period. This is
the default behavior.
We strongly recommend using the dot1x supplicant controlled transient command on a supplicant switch
when BPDU guard is enabled on the authenticator switch port with the spanning-tree bpduguard enable
interface configuration command.
Examples This example shows how to control access to 802.1x supplicant ports on a switch during authentication:
Device(config)# dot1x supplicant controlled transient
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
dot1x supplicant controlled transient
Modification
This command was introduced.
This command was reintroduced.
This command was not supported
in Cisco IOS XE Denali 16.1.x and
Cisco IOS XE Denali 16.2.x
749