7.1.8 Changing IEEE 802.1X authentication Status

<Structure of this section>

(1) Initializing Authentication Status

To initialize the authentication status of connected devices, use the clear dot1x auth-state command. You can specify either the port number or the terminal MAC address. If you omit this specification, the switch will initialize all authentication information.

After you execute this command, affected terminals must undergo re-authentication before they can access the network again.

Figure 7-1: Example of initializing the status of all IEEE802.1X authentications on a device
> clear dot1x auth-state Initialize all 802.1X Authentication Information. Are you sure? (y/n) :y

(2) Forced re-authentication

To force re-authentication for connected devices, use the reauthenticate dot1x command. You can specify either the port number or the terminal MAC address. If you omit this specification, the switch will force all authenticated terminals to undergo re-authentication.

Executing this command does not affect the network access of supplicants that are able to re-authenticate successfully.

Figure 7-2: Example of re-authenticating all IEEE802.1X authenticators in a switch
> reauthenticate dot1x Reauthenticate all 802.1X ports and vlans. Are you sure? (y/n) :y