SUMMARY STEPS
1.
configure terminal
2.
interface interface-id
3.
Use one of the following:
•
switchport mode access
•
switchport mode private-vlan host
4.
authentication port-control auto
5.
authentication event fail action authorize vlan vlan-id
6.
end
DETAILED STEPS
PurposeCommand or Action
Enters the global configuration mode.configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the port to be configured, and enter interface
configuration mode.
interface interface-id
Example:
Switch(config)# interface gigabitethernet2/0/2
Step 2
Use one of the following:
Step 3
•
Sets the port to access mode.
•
Configures the Layer 2 port as a private-VLAN host
port.
•
switchport mode access
•
switchport mode private-vlan host
Example:
Switch(config-if)# switchport mode access
Enables 802.1x authentication on the port.authentication port-control auto
Example:
Switch(config-if)# authentication port-control
Step 4
auto
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
OL-29434-01 271
Configuring IEEE 802.1x Port-Based Authentication
Configuring a Restricted VLAN