Cisco Catalyst 3750 Metro

2-3
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
Chapter 2 Catalyst 3750 Metro Switch Cisco IOS Commands
aaa authentication dot1x
aaa authentication dot1x
Use the aaa authentication dot1x global configuration command to specify one or more authentication,
authorization, and accounting (AAA) methods for use on ports running IEEE 802.1x. Use the no form
of this command to disable authentication.
aaa authentication dot1x {default} method1 [method2...]
no aaa authentication dot1x {default}
Syntax Description
Note Though visible in the command-line help strings, the group tacacs+ keyword is not supported.
Defaults No authentication is performed.
Command Modes Global configuration
Command History
Usage Guidelines The method argument identifies the list of methods that the authentication algorithm tries in the given
sequence to validate the password provided by the client. The only method that is truly 802.1x-compliant
is the group radius method, in which the client data is validated against a RADIUS authentication
server. The remaining methods enable AAA to authenticate the client by using locally configured data.
For example, the local and local-case methods use the username and password that are saved in the
configuration file. The enable and line methods use the enable and line passwords for authentication.
If you specify group radius, you must configure the RADIUS server by entering the radius-server host
global configuration command.
default Use the listed authentication methods that follow this argument as the default
list of methods when a user logs in.
method1
[method2...]
At least one of the these keywords:
• enable—Use the enable password for authentication.
• group radius—Use the list of all RADIUS servers for authentication.
• line—Use the line password for authentication.
• local—Use the local username database for authentication.
• local-case—Use the case-sensitive local username database for
authentication.
• none—Use no authentication. The client is automatically authenticated by
the switch without using the information supplied by the client.
Release Modification
12.1(14)AX This command was introduced.