Cisco Catalyst 2960 Series, Configuration Manual

Page: 1458 / 2288

DETAILED STEPS
Purpose Command or Action
Enters global configuration mode. configure terminal
Example:
Switch# configure terminal
Step 1
Specifies the port to be configured, and enter interface
configuration mode. interface interface-id
Example:
Switch(config)# interface
Step 2
gigabitethernet2/0/2
Use the
replace
keyword to enable MAC replace on the interface.
The port removes the current session and initiates authentication
with the new host.
authentication violation
{
protect
|
replace
|
restrict | shutdown }
Example:
Switch(config-if)#
authentication violation
Step 3
The other keywords have these effects:
• protect : the port drops packets with unexpected MAC
addresses without generating a system message.
replace
•
restrict
: violating packets are dropped by the CPU and a
system message is generated.
•
shutdown
: the port is error disabled when it receives an
unexpected MAC address.
Returns to privileged EXEC mode. end
Example:
Switch(config-if)#
end
Step 4
Verifies your entries. show running-config
Example:
Switch# show running-config
Step 5
(Optional) Saves your entries in the configuration file. copy running-config startup-config
Example:
Switch#
copy running-config startup-config
Step 6
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1376
How to Configure 802.1x Port-Based Authentication