Cisco Catalyst 3650 Series User Manual

dot1x supplicant controlled transient
To control access to an 802.1x supplicant port during authentication, use the dot1x supplicant controlled
transient command in global configuration mode. To open the supplicant port during authentication, use the
no form of this command
dot1x supplicant controlled transient
no dot1x supplicant controlled transient
Syntax Description
This command has no arguments or keywords.
Command Default
Access is allowed to 802.1x supplicant ports during authentication.
Command Modes
Global configuration
Command History
ModificationRelease
This command was introduced.Cisco IOS XE 3.3SECisco IOS XE 3.3SE
This command was reintroduced.
This command was not supported
in Cisco IOS XE Denali 16.1.x and
Cisco IOS XE Denali 16.2.x
Cisco IOS XE Denali 16.3.1
Usage Guidelines
In the default state, when you connect a supplicant switch to an authenticator switch that has BPCU guard
enabled, the authenticator port could be error-disabled if it receives a Spanning Tree Protocol (STP) bridge
protocol data unit (BPDU) packets before the supplicant switch has authenticated. Beginning with Cisco IOS
Release 15.0(1)SE, you can control traffic exiting the supplicant port during the authentication period. Entering
the dot1x supplicant controlled transient global configuration command temporarily blocks the supplicant
port during authentication to ensure that the authenticator port does not shut down before authentication
completes. If authentication fails, the supplicant port opens. Entering the no dot1x supplicant controlled
transient global configuration command opens the supplicant port during the authentication period. This is
the default behavior.
We strongly recommend using the dot1x supplicant controlled transient command on a supplicant switch
when BPDU guard is enabled on the authenticator switch port with the spanning-tree bpduguard enable
interface configuration command.
Examples
This example shows how to control access to 802.1x supplicant ports on a switch during authentication:
Device(config)# dot1x supplicant controlled transient
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
749
dot1x supplicant controlled transient

Cisco Catalyst 3650 Series Specifications

General

Brand	Cisco
Model	Catalyst 3650 Series
Category	Switch
Language	English