Configuration Guide 583
Configuring Network Security
802.1X Configuration
Step 2
interface {fastEthernet
port
| range fastEthernet
port-list
| gigabitEthernet
port
|
range gigabitEthernet
port-list
}
Enter interface configuration mode.
port:
Enter the ID of the port to be configured.
Step 3
dot1x
Enable 802.1X authentication for the port.
Step 4
dot1x port-method
{ mac-based | port-based }
Configure the control type for the port. By default, it is mac-based.
mac-based
:
All clients connected to the port need to be authenticated.
port-based
:
If a client connected to the port is authenticated, other clients can
access the LAN without authentication.
Step 5
dot1x guest-vlan
(Optional) Enable guest VLAN on the port.
Note: Before enabling guest VLAN, the control type of the port should be configured
as port-based.
Step 6
dot1x port-control
{ auto | authorized-force | unauthorized-force }
Configure the control mode for the port. By default, it is auto.
auto
: If this option is selected, the port can access the network only when it is
authenticated.
authorized-force
: If this option is selected, the port can access the network without
authentication.
unauthorized-force
: If this option is selected, the port can never be authenticated.
Step 7
show dot1x interface [fastEthernet
port
|gigabitEthernet
port
| ten-gigabitEthernet
port
]
(Optional) Verify the configurations of 802.1X authentication on the port.
port:
Enter the ID of the port to be configured. If no specific port is entered, the
switch will show configurations of all ports.
Step 8
end
Return to privileged EXEC mode.
Step 9
copy running-config startup-config
Save the settings in the configuration file.
The following example shows how to enable 802.1X authentication on port 1/0/2, configure
the control type as port-based, and configure the control mode as auto:
Switch#configure
