802.

1X Port States:
o When using IEEE 802.1x (Dot1x), there are three defined port states:
o Port state determines whether the client will get the network access.
Auto:
o Enables 802.1X port-based authentication & causes the port to begin in unauthorized state.
o Auto port state allowing only EAPOL frames, CDP, and STP traffic to be sent and received.
o After the supplicant or user is authenticated, the port transitions to the authorized state.
Forced-Authorized:
o Forced Authorized state disables IEEE 802.1x (Dot1x), port-based authentication.
o Disables IEEE 802.1x and causes the port to transition to the authorized state.
o In Forced-Authorized state, all traffic is allowed as normal without any restriction.
o The port transmits & receives normal traffic without 802.1x-based authentication.
Forced-Unauthorized:
o In this state, the port ignores all traffic, including any attempts to authenticate.
o In Forced-Unauthorized the port is forced to never authorize any connected client.
o Port remain in the unauthorized state, ignoring all attempts by client to authenticate.
o Basically, the authenticator cannot provide authentication services to the supplicants.
802.1X Port State Description
Force-Authorized Client is always authorized to send traffic (Default)
Force-Unauthorized Client is never authorized to send traffic (Even after authentication)
Auto 802.1x decides whether client is authorized or not to send traffic

1 | P a g e Prepared By Ahmad Ali, Email: [email protected] , Mobile# 0564303717