DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the port to be configured, and enter interface
configuration mode.
interface interface-id
Example:
Switch(config)# interface
Step 2
gigabitethernet2/0/2
Use the replace keyword to enable MAC replace on the interface.
The port removes the current session and initiates authentication
with the new host.
authentication violation {protect | replace |
restrict | shutdown}
Example:
Switch(config-if)# authentication violation
Step 3
The other keywords have these effects:
•
protect: the port drops packets with unexpected MAC
addresses without generating a system message.
replace
•
restrict: violating packets are dropped by the CPU and a
system message is generated.
•
shutdown: the port is error disabled when it receives an
unexpected MAC address.
Returns to privileged EXEC mode.end
Example:
Switch(config-if)# end
Step 4
Verifies your entries.show running-config
Example:
Switch# show running-config
Step 5
(Optional) Saves your entries in the configuration file.copy running-config startup-config
Example:
Switch# copy running-config startup-config
Step 6
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1376
How to Configure 802.1x Port-Based Authentication