An engineer is adding a new network device to be used with 802.1X authentication. After configuring the device, the engineer notices that no endpoints that connect to the switch are able to…

The `dot1x system-auth-control` global configuration command on a Cisco switch enables 802.1X authentication globally, allowing it to function on individual ports where it's also enabled. Without this global command, 802.1X authentication will not be operational, preventing any endpoints from authenticating.

Switches act as authenticators, not supplicants, in an 802.1X deployment, so the switch's supplicant not connecting to ISE is an incorrect concept.

The `dot1x critical vlan` command is for critical authentication situations and would not prevent all endpoints from authenticating initially.

While endpoint firewalls could block EAPoL, it's less likely to be the root cause for all endpoints failing authentication on a newly configured switch compared to a missing global switch configuration.