Cisco Catalyst 2960 Series, Configuration Manual

Page: 1463 / 2288

Purpose Command or Action
Use one of the following:
Step 3
• Sets the port to access mode.
• Configures the Layer 2 port as a private-VLAN host
port.
• switchport mode access
• switchport mode private-vlan host
Example:
Switch(config-if)# switchport mode access
Enables 802.1x authentication on the port.
authentication port-control auto
Example:
Switch(config-if)# authentication port-control
Step 4
auto
Specifies an active VLAN as an 802.1x restricted VLAN.
The range is 1 to 4094. authentication event fail action authorize vlan vlan-id
Example:
Switch(config-if)# authentication event fail
Step 5
You can configure any active VLAN except an internal
VLAN (routed port), an RSPAN VLAN or a voice VLAN
as an 802.1x restricted VLAN.
action authorize vlan 2
Returns to privileged EXEC mode. end
Example:
Switch(config-if)# end
Step 6
Configuring Number of Authentication Attempts on a Restricted VLAN
You can configure the maximum number of authentication attempts allowed before a user is assigned to the
restricted VLAN by using the
authentication event retry retry count interface configuration command. The
range of allowable authentication attempts is 1 to 3. The default is 3 attempts.
Beginning in privileged EXEC mode, follow these steps to configure the maximum number of allowed
authentication attempts. This procedure is optional.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1381
How to Configure 802.1x Port-Based Authentication