2-3
Catalyst 3750 Metro Switch Command Reference
OL-9645-10
Chapter 2 Catalyst 3750 Metro Switch Cisco IOS Commands
aaa authentication dot1x
aaa authentication dot1x
Use the
aaa authentication dot1x
global configuration command to specify one or more authentication,
authorization, and accounting (AAA) methods for use on ports running IEEE 802.1x. Use the
no
form
of this command to disable authentication.
aaa authentication dot1x
{
default
}
method1
[
method2
...]
no aaa authentication dot1x
{
default
}
Syntax Description
Note
Though visible in the command-line help strings, the
group
keyword is not supported.
Defaults
No authentication is performed.
Command Modes
Global configuration
Command History
Usage Guidelines
The
method
argument identifies the list of methods that the authentication algorithm tries in the given
sequence to validate the password provided by the client. The only method that is truly 802.1x-compliant
is the
group radius
method, in which the client data is validated against a RADIUS authentication
server. The remaining methods enable AAA to authenticate the client by using locally configured data.
For example, the
local
and
local-case
methods use the username and password that are saved in the
configuration file. The
enable
and
line
methods use the
enable
and
line
passwords for authentication.
If you specify
group radius
, you must configure the RADIUS server by entering the
radius-server host
global configuration command.
default
Use the listed authentication methods that follow this argument as the default
list of methods when a user logs in.
method1
[
method2
...]
At least one of the these keywords:
•
enable
—Use the enable password for authentication.
•
group radius
—Use the list of all RADIUS servers for authentication.
•
line
—Use the line password for authentication.
•
local
—Use the local username database for authentication.
•
local-case
—Use the case-sensitive local username database for
authentication.
•
none
—Use no authentication. The client is automatically authenticated by
the switch without using the information supplied by the client.
Release
Modification
12.1(14)AX
This command was introduced.
