An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication. Which command should be used to complete this configuration?

'dot1x pae authenticator' specifies the Port Access Entity (PAE) role as authenticator, which is typically the default and not the command to globally enable the 802.1X feature.

The 'dot1x system-auth-control' command globally enables 802.1X authentication on the switch, making it capable of authenticating clients based on their port. This command is a prerequisite for enabling port-based authentication on individual interfaces.

'authentication port-control auto' is configured on a specific *interface* to define the 802.1X port control mode, not to globally enable the system feature.

'aaa authentication dot1x default group radius' configures the authentication method list for 802.1X, directing the switch to use RADIUS, but it does not enable the 802.1X feature itself.