Dot1X Supplicant Controlled Transient - Cisco Catalyst 3750-X Command Reference Manual

Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands

dot1x supplicant controlled transient

To control access to an 802.1x supplicant port during authentication, use the dot1x supplicant
controlled transient command in global configuration mode. To open the supplicant port during
authentication, use the no form of this command
Syntax Description
This command has no arguments or keywords.
Defaults
Access is allowed to 802.1x supplicant ports during authentication.
Command Modes Global configuration
Command History Release
15.0(1)SE
Usage Guidelines
In the default state, when you connect a supplicant switch to an authenticator switch that has BPCU
guard enabled, the authenticator port could be error-disabled if it receives a Spanning Tree Protocol
(STP) bridge protocol data unit (BPDU) packets before the supplicant switch has authenticated.
Beginning with Cisco IOS Release 15.0(1)SE, you can control traffic exiting the supplicant port during
the authentication period. Entering the dot1x supplicant controlled transient global configuration
command temporarily blocks the supplicant port during authentication to ensure that the authenticator
port does not shut down before authentication completes. If authentication fails, the supplicant port
opens. Entering the no dot1x supplicant controlled transient global configuration command opens the
supplicant port during the authentication period. This is the default behavior.
We strongly recommend using the dot1x supplicant controlled transient command on a supplicant
switch when BPDU guard is enabled on the authenticator switch port with the spanning-tree
bpduguard enable interface onfiguration command.
If you globally enable BPDU guard on the authenticator switch by using the spanning-tree portfast
Note
bpduguard default global configuration command, entering the dot1x supplicant controlled transient
command does not prevent the BPDU violation.
Examples
This example shows how to control access to 802.1x supplicant ports on a switch during authentication:
Switch(config)# dot1x supplicant controlled transient
OL-29704-01
dot1x supplicant controlled transient
no dot1x supplicant controlled transient
Modification
This command was introduced.
dot1x supplicant controlled transient
Catalyst 3750-X and 3560-X Switch Command Reference
2-201