Cisco Catalyst 2960 Series, Configuration Manual

Page: 1487 / 2288

Configuring VLAN ID-based MAC Authentication
Beginning in privileged EXEC mode, follow these steps:
SUMMARY STEPS
1.
configure terminal
2.
mab request format attribute 32 vlan access-vlan
3. copy running-config startup-config
DETAILED STEPS
Purpose Command or Action
Enters global configuration mode. configure terminal
Example:
Switch# configure terminal
Step 1
Enables VLAN ID-based MAC authentication. mab request format attribute 32 vlan access-vlan
Example:
Switch(config)#
mab request format attribute 32 vlan
Step 2
access-vlan
(Optional) Saves your entries in the
configuration file. copy running-config startup-config
Example:
Switch# copy running-config startup-config
Step 3
Configuring Flexible Authentication Ordering
The examples used in the instructions below changes the order of Flexible Authentication Ordering so that
MAB is attempted before IEEE 802.1X authentication (dot1x). MAB is configured as the first authentication
method, so MAB will have priority over all other authentication methods.
Before changing the default order and priority of these authentication methods, however, you should
understand the potential consequences of those changes. See
http://www.cisco.com/en/US/prod/collateral/
iosswrel/ps6537/ps6586/ps6638/application_note_c27-573287_ps6638_Products_White_Paper.html for
details.
Note
Beginning in privileged EXEC mode, follow these steps:
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1405
How to Configure 802.1x Port-Based Authentication