![background image](http://html.mh-extra.com/html/cisco/3560g-24ps-catalyst-switch/3560g-24ps-catalyst-switch_command-reference-manual_67503112.webp)
2-80
Catalyst 3560 Switch Command Reference
78-16405-05
Chapter 2 Catalyst 3560 Switch Cisco IOS Commands
dot1x
dot1x
Use the
dot1x
global configuration command to globally enable IEEE 802.1x. Use the
no
form of this
command to return to the default setting.
dot1x
{
system-auth-control
} | {
guest-vlan
supplicant
}
no dot1x
{
system-auth-control
} | {
guest-vlan
supplicant
}
Syntax Description
Defaults
IEEE 802.1x is disabled, and the optional guest VLAN behavior is disabled.
Command Modes
Global configuration
Command History
Usage Guidelines
You must enable authentication, authorization, and accounting (AAA) and specify the authentication
method list before globally enabling IEEE 802.1x. A method list describes the sequence and
authentication methods to be used to authenticate a user.
Before globally enabling IEEE 802.1x on a switch, remove the EtherChannel configuration from the
interfaces on which IEEE 802.1x and EtherChannel are configured.
If you are using a device running the Cisco Access Control Server (ACS) application for IEEE 802.1x
authentication with EAP-Transparent LAN Services (TLS) and with EAP-MD5, make sure that the
device is running ACS Version 3.2.1 or later.
You can use the
guest-vlan supplicant
keywords to enable the optional IEEE 802.1x guest VLAN
behavior globally on the switch. For more information, see the
dot1x guest-vlan
command.
Examples
This example shows how to globally enable IEEE 802.1x on a switch:
Switch(config)#
dot1x system-auth-control
This example shows how to globally enable the optional guest VLAN behavior on a switch:
Switch(config)#
dot1x guest-vlan supplicant
You can verify your settings by entering the
show dot1x
[
interface
interface-id
] privileged EXEC
command.
system-auth-control
Enable IEEE 802.1x globally on the switch.
guest-vlan supplicant
Enable optional guest VLAN behavior globally on the switch.
Release
Modification
12.1(19)EA1
This command was introduced.
12.2(25)SE
The
guest-vlan supplicant
keywords were added.