Cisco Catalyst 2960 Series User Manual

Configuring VLAN ID-based MAC Authentication
Beginning in privileged EXEC mode, follow these steps:
SUMMARY STEPS
1.
configure terminal
2.
mab request format attribute 32 vlan access-vlan
3.
copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Enables VLAN ID-based MAC authentication.mab request format attribute 32 vlan access-vlan
Example:
Switch(config)# mab request format attribute 32 vlan
Step 2
access-vlan
(Optional) Saves your entries in the
configuration file.
copy running-config startup-config
Example:
Switch# copy running-config startup-config
Step 3
Configuring Flexible Authentication Ordering
The examples used in the instructions below changes the order of Flexible Authentication Ordering so that
MAB is attempted before IEEE 802.1X authentication (dot1x). MAB is configured as the first authentication
method, so MAB will have priority over all other authentication methods.
Before changing the default order and priority of these authentication methods, however, you should
understand the potential consequences of those changes. See http://www.cisco.com/en/US/prod/collateral/
iosswrel/ps6537/ps6586/ps6638/application_note_c27-573287_ps6638_Products_White_Paper.html for
details.
Note
Beginning in privileged EXEC mode, follow these steps:
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1405
How to Configure 802.1x Port-Based Authentication

Cisco Catalyst 2960 Series Specifications

General

Layer	Layer 2
Power over Ethernet (PoE)	Available on some models
RAM	128 MB
Flash Memory	32 MB
MAC Address Table Size	8000
Operating Temperature	0°C to 45°C (32 to 113°F)
Ports	24 or 48 x 10/100/1000