Cisco Catalyst 2960 Series, Configuration Manual

Page: 1407 / 2288

Port-Based Authentication Manager CLI Commands
The authentication-manager interface-configuration commands control all the authentication methods, such
as 802.1x, MAC authentication bypass, and web authentication. The authentication manager commands
determine the priority and order of authentication methods applied to a connected host.
The authentication manager commands control generic authentication features, such as host-mode, violation
mode, and the authentication timer. Generic authentication commands include the
authentication host-mode ,
authentication violation , and authentication timer interface configuration commands.
802.1x-specific commands begin with the
dot1x
keyword. For example, the
authentication port-control
auto interface configuration command enables authentication on an interface. However, the dot1x
system-authentication control global configuration command only globally enables or disables 802.1x
authentication.
If 802.1x authentication is globally disabled, other authentication methods are still enabled on that port,
such as web authentication.
Note
The authentication manager commands provide the same functionality as earlier 802.1x commands.
When filtering out verbose system messages generated by the authentication manager, the filtered content
typically relates to authentication success. You can also filter verbose messages for 802.1x authentication and
MAB authentication. There is a separate command for each authentication method:
• The
no authentication logging verbose
global configuration command filters verbose messages from
the authentication manager.
• The no dot1x logging verbose global configuration command filters 802.1x authentication verbose
messages.
• The no mab logging verbose global configuration command filters MAC authentication bypass (MAB)
verbose messages
Table 124: Authentication Manager Commands and Earlier 802.1x Commands
Description The equivalent 802.1x
commands in Cisco IOS
Release 12.2(46)SE and earlier The authentication manager
commands in Cisco IOS
Release 12.2(50)SE or later
Enable 802.1x authentication with the
wake-on-LAN (WoL) feature, and configure
the port control as unidirectional or
bidirectional. dot1x control-direction
{ both | in }
authentication
control-direction
{ both | in }
Enable the restricted VLAN on a port.
Enable the
inaccessible-authentication-bypass feature.
Specify an active VLAN as an 802.1x guest
VLAN.
dot1x auth-fail vlan
dot1x critical (interface
configuration)
dot1x guest-vlan6
authentication event
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1325
Information About 802.1x Port-Based Authentication