Cisco WS-C6506 - Page 1027

40-33
Catalyst 6500 Series Switch Software Configuration Guide—Release 8.7
OL-8978-04
Chapter 40 Configuring 802.1X Authentication
Configuring 802.1X Authentication on the Switch
Using the CLI to Configure 802.1X User Distribution
To configure a VLAN group and map a VLAN to it, perform these tasks in privileged mode:
This example shows how to configure the VLAN groups, map the VLANs to the groups, and verify that
the VLAN groups were configured and mapped to the specified VLANs:
Console> (enable) set dot1x vlan-group eng-dept 10
Vlan group name eng-dept is successfully configured and mapped to vlan 10
Console> (enable) set dot1x vlan-group hr-dept 20
Vlan group name hr-dept is successfully configured and mapped to vlan 20
Console> (enable) show dot1x vlan-group eng-dept
Group Name Vlans Mapped
------------- --------------
eng-dept 10
Console> (enable) show dot1x vlan-group all
Group Name Vlans Mapped
------------- --------------
eng-dept 10
hr-dept 20
Console> (enable)
This example shows how to add a VLAN to an existing VLAN group and verify that the VLAN was
added:
Console> (enable) set dot1x vlan-group eng-dept 30
Vlan 30 is successfully mapped to vlan group eng-dept.
Console> (enable) show dot1x vlan-group eng-dept
Group Name Vlans Mapped
------------- --------------
eng-dept 10,30
Console> (enable)
This example shows how to clear a VLAN from a VLAN group:
Console> (enable) clear dot1x vlan-group eng-dept 10
Vlan 10 is successfully cleared from vlan group eng-dept.
Console> (enable)
This example shows that when all the VLANs are cleared from a VLAN group, the VLAN group is
cleared:
Console> (enable) clear dot1x vlan-group eng-dept 30
Vlan 30 is successfully cleared from vlan group eng-dept.
Warning: No more vlans mapped to this group, vlan group is cleared.
Console> (enable) show dot1x vlan-group eng-dept
Vlan group eng-dept doesn't exist, can not display.
Console> (enable)
Task Command
Configure a VLAN group and map a single VLAN
or a range of VLANs to it.
set dot1x vlan-group {vlan-group-name}
{vlans}
Verify the configuration. show dot1x vlan-group [all | {vlan-group-name}]
Clear the VLAN group configuration or elements
of the VLAN group configuration.
clear dot1x vlan-group [all {vlan-group-name}
[{vlans}]]