802.1x Commands 491
802.1x Commands
aaa authentication dot1x
The aaa authentication dot1x Global Configuration mode command specifies one or more
authentication, authorization, and accounting (AAA) methods for use to authenticate interfaces
running IEEE 802.1X. Use the no form of this command to return to default.
Syntax
•
aaa authentication dot1x default
method1
[
method2
...]
• no aaa authentication dot1x default
•
method1
[
method2
...] — At least one from the following table:
Default Configuration
The default behavior of the "aaa authentication" for dot1.x is "failed to authenticate". If the 8021.x
calls the AAA for authentication services it will receive a fail status.
Command Mode
Global Configuration mode.
User Guidelines
• The additional methods of authentication are used only if the previous method returns an error,
for example the authentication server is down, and not if the request for authenticate is denied
access. To ensure that the authentication succeeds even if all methods return an error, specify
none
as the final method in the command line.
• The radius server must support MD-5 challenge and EAP type frames.
Keyword Description
Radius Uses the list of all RADIUS servers for
authentication
None Uses no authentication
5400_CLI.book Page 491 Wednesday, December 17, 2008 4:33 PM