49-73
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 49 Configuring 802.1X Port-Based Authentication
Configuring 802.1X Port-Based Authentication
Switch#
Configuring 802.1X with Voice VLAN
Note You must configure 802.1X and voice VLAN simultaneously.
Note You cannot configure an authentication-failed VLAN and a voice VLAN on the same port. When you
try to configure these two features on the same port, a syslog message appears.
To enable 802.1X with voice VLAN, perform this task:
This example shows how to enable 802.1X with voice VLAN feature on Fast Ethernet interface 5/9:
Cisco IOS Release 12.2(50)SG and later
Switch# configure terminal
Switch(config)# interface fastethernet5/9
Switch(config-if)# switchport access vlan 2
Switch(config-if)# switchport mode access
Switch(config-if)# switchport voice vlan 10
Switch(config-if)# dot1x pae authenticator
Command Purpose
Step 1
Switch# configure terminal
Enters global configuration mode.
Step 2
Switch(config)# interface
interface-id
Enters interface configuration mode.
Step 3
Switch(config-if)# switchport
access vlan vlan-id
Sets the VLAN for a switched interface in access mode.
Step 4
Switch(config-if)# switchport mode
access
Specifies a nontrunking, nontagged single VLAN Layer 2 interface.
Step 5
Switch(config-if)# switchport voice
vlan vlan-id
Sets the voice VLAN for the interface.
Step 6
Switch(config-if)# dot1x pae
authenticator
Enables 802.1X authentication on the port with default parameters.
Refer to the “Default 802.1X Configuration” section on page 49-27.
Step 7
Cisco IOS Release 12.2(50)SG and later
and later
Switch(config-if)# authentication
port-control auto
Cisco IOS Release 12.2(46)SG or earlier
releases
Switch(config-if)# dot1x
port-control auto
Enables 802.1X authentication on the interface.
Step 8
Switch(config-if)# end
Returns to configuration mode.
Step 9
Switch(config)# end
Returns to privileged EXEC mode.
Step 10
Switch# show dot1x interface
interface-id details
(Optional) Verifies your entries.
Step 11
Switch# copy running-config
startup-config
(Optional) Saves your entries in the configuration file.