Cisco Catalyst 250 Series User Manual

DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the port to be configured, and enter interface
configuration mode.
interface interface-id
Example:
Switch(config)# interface gigabitethernet2/0/3
Step 2
Use one of the following:
Step 3
•
Sets the port to access mode.
•
Configures the Layer 2 port as a private-VLAN host
port.
•
switchport mode access
•
switchport mode private-vlan host
Example:
or
Switch(config-if)# switchport mode access
Enables 802.1x authentication on the port.authentication port-control auto
Example:
Switch(config-if)# authentication port-control
Step 4
auto
Specifies an active VLAN as an 802.1x restricted VLAN.
The range is 1 to 4094.
authentication event fail action authorize vlan vlan-id
Example:
Switch(config-if)# authentication event fail
Step 5
You can configure any active VLAN except an internal
VLAN (routed port), an RSPAN VLAN or a voice VLAN
as an 802.1x restricted VLAN.
action authorize vlan 8
Specifies a number of authentication attempts to allow
before a port moves to the restricted VLAN. The range is
1 to 3, and the default is 3.
authentication event retry retry count
Example:
Switch(config-if)# authentication event retry
Step 6
2
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
OL-29048-01 327
Configuring IEEE 802.1x Port-Based Authentication
Configuring a Restricted VLAN

Cisco Catalyst 250 Series Specifications

General

Brand	Cisco
Model	Catalyst 250 Series
Category	Switch
Language	English