Cisco Catalyst 2960 Series, Configuration Manual

Page: 1456 / 2288

Purpose Command or Action
Sets the port to access mode only if you previously configured
the RADIUS server. switchport mode access
Example:
Switch(config-if)#
switchport mode access
Step 3
Sets the number of times that the switch restarts the
authentication process before the port changes to the
unauthorized state. The range is 0 to 10; the default is 2. dot1x max-req count
Example:
Switch(config-if)# dot1x max-req 4
Step 4
Returns to privileged EXEC mode. end
Example:
Switch(config-if)#
end
Step 5
Enabling MAC Move
MAC move allows an authenticated host to move from one port on the switch to another.
Beginning in privileged EXEC mode, follow these steps to globally enable MAC move on the switch. This
procedure is optional.
SUMMARY STEPS
1.
configure terminal
2. authentication mac-move permit
3.
end
4. show running-config
5. copy running-config startup-config
DETAILED STEPS
Purpose Command or Action
Enters global configuration mode. configure terminal
Example:
Switch# configure terminal
Step 1
Enables MAC move on the switch. Default is deny.
authentication mac-move permit
Step 2
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1374
How to Configure 802.1x Port-Based Authentication