2-201
Catalyst 3750-X and 3560-X Switch Command Reference
OL-29704-01
Chapter 2 Catalyst 3750-X and 3560-X Switch Cisco IOS Commands
dot1x supplicant controlled transient
dot1x supplicant controlled transient
To control access to an 802.1x supplicant port during authentication, use the dot1x supplicant
controlled transient command in global configuration mode. To open the supplicant port during
authentication, use the no form of this command
dot1x supplicant controlled transient
no dot1x supplicant controlled transient
Syntax Description This command has no arguments or keywords.
Defaults Access is allowed to 802.1x supplicant ports during authentication.
Command Modes Global configuration
Command History
Usage Guidelines In the default state, when you connect a supplicant switch to an authenticator switch that has BPCU
guard enabled, the authenticator port could be error-disabled if it receives a Spanning Tree Protocol
(STP) bridge protocol data unit (BPDU) packets before the supplicant switch has authenticated.
Beginning with Cisco IOS Release 15.0(1)SE, you can control traffic exiting the supplicant port during
the authentication period. Entering the dot1x supplicant controlled transient global configuration
command temporarily blocks the supplicant port during authentication to ensure that the authenticator
port does not shut down before authentication completes. If authentication fails, the supplicant port
opens. Entering the no dot1x supplicant controlled transient global configuration command opens the
supplicant port during the authentication period. This is the default behavior.
We strongly recommend using the dot1x supplicant controlled transient command on a supplicant
switch when BPDU guard is enabled on the authenticator switch port with the spanning-tree
bpduguard enable interface onfiguration command.
Note If you globally enable BPDU guard on the authenticator switch by using the spanning-tree portfast
bpduguard default global configuration command, entering the dot1x supplicant controlled transient
command does not prevent the BPDU violation.
Examples This example shows how to control access to 802.1x supplicant ports on a switch during authentication:
Switch(config)# dot1x supplicant controlled transient
Release Modification
15.0(1)SE This command was introduced.