Cisco CATALYST 2960

10-67
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
OL-26520-01
Chapter 10 Configuring IEEE 802.1x Port-Based Authentication
Configuring 802.1x Authentication
This example shows how to configure open 1x on a port:
Switch# configure terminal
Switch(config)# interface gigabitethernet1/0/2
Switch(config)# authentication control-direction both
Switch(config)# au ten tic at ion fallback profile1
Switch(config)# authentication host-mode multi-auth
Switch(config)# authentication open
Switch(config)# authentication order dot1x webauth
Switch(config)# authentication periodic
Switch(config)# authentication port-control auto
Disabling 802.1x Authentication on the Port
You can disable 802.1x authentication on the port by using the no dot1x pae interface configuration
command.
Beginning in privileged EXEC mode, follow these steps to disable 802.1x authentication on the port.
This procedure is optional.
To configure the port as an 802.1x port access entity (PAE) authenticator, which enables 802.1x on the
port but does not allow clients connected to the port to be authorized, use the dot1x pae authenticator
interface configuration command.
This example shows how to disable 802.1x authentication on the port:
Switch(config)# interface gigabitethernet1/0/2
Switch(config-if)# no dot1x pae authenticator
Step 10
show authentication (Optional) Verify your entries.
Step 11
copy running-config startup-config (Optional) Save your entries in the configuration file.
Command Purpose
Command Purpose
Step 1
configure terminal Enter global configuration mode.
Step 2
interface interface-id Specify the port to be configured, and enter interface configuration mode.
Step 3
no dot1x pae Disable 802.1x authentication on the port.
Step 4
end Return to privileged EXEC mode.
Step 5
show authentication interface
interface-id
Verify your entries.
Step 6
copy running-config startup-config (Optional) Save your entries in the configuration file.