Cisco Catalyst 2960 Series, Configuration Manual

Page: 1443 / 2288

Purpose Command or Action
Sets the port to access mode. switchport mode access
Example:
Switch(config-if)#
switchport mode access
Step 5
Configures the violation mode. The keywords have these meanings: authentication violation { shutdown | restrict
| protect | replace }
Step 6
• shutdown – Error disable the port.
Example:
Switch(config-if)# authentication
•
restrict
– Generate a syslog error.
•
protect
–
Drop packets from any new device that sends traffic
to the port.
violation restrict
• replace – Removes the current session and authenticates with
the new host.
Returns to privileged EXEC mode. end
Example:
Switch(config-if)#
end
Step 7
Configuring 802.1x Authentication
To allow per-user ACLs or VLAN assignment, you must enable AAA authorization to configure the switch
for all network-related service requests.
This is the 802.1x AAA process:
Before You Begin
To configure 802.1x port-based authentication, you must enable authentication, authorization, and accounting
(AAA) and specify the authentication method list. A method list describes the sequence and authentication
method to be queried to authenticate a user.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1361
How to Configure 802.1x Port-Based Authentication