Cisco IE-3000-8TC Command Reference - Page 102
dot1x
![]() |
View all Cisco IE-3000-8TC manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 102 highlights
dot1x Chapter 2 IE 3000 Switch Cisco IOS Commands dot1x Use the dot1x global configuration command to globally enable IEEE 802.1x authentication. Use the no form of this command to return to the default setting. dot1x {critical {eapol | recovery delay milliseconds} | {guest-vlan supplicant} | system-auth-control} no dot1x {critical {eapol | recovery delay} | {guest-vlan supplicant} | system-auth-control} Note Though visible in the command-line help strings, the credentials name keywords are not supported. Syntax Description critical {eapol | recovery delay milliseconds} guest-vlan supplicant system-auth-control Configure the inaccessible authentication bypass parameters. For more information, see the dot1x critical (global configuration) command. Enable optional guest VLAN behavior globally on the switch. Enable IEEE 802.1x authentication globally on the switch. Defaults IEEE 802.1x authentication is disabled, and the optional guest VLAN behavior is disabled. Command Modes Global configuration Command History Release 12.2(44)EX Modification This command was introduced. Usage Guidelines You must enable authentication, authorization, and accounting (AAA) and specify the authentication method list before globally enabling IEEE 802.1x authentication. A method list describes the sequence and authentication methods to be used to authenticate a user. Before globally enabling IEEE 802.1x authentication on a switch, remove the EtherChannel configuration from the interfaces on which IEEE 802.1x authentication and EtherChannel are configured. If you are using a device running the Cisco Access Control Server (ACS) application for IEEE 802.1x authentication with EAP-Transparent LAN Services (TLS) and with EAP-MD5, make sure that the device is running ACS Version 3.2.1 or later. You can use the guest-vlan supplicant keywords to enable the optional IEEE 802.1x guest VLAN behavior globally on the switch. For more information, see the dot1x guest-vlan command. Examples This example shows how to globally enable IEEE 802.1x authentication on a switch: Switch(config)# dot1x system-auth-control 2-76 Cisco IE 3000 Switch Command Reference OL-13019-01
![](/manual_guide/products/cisco-ie30008tc-command-reference-94363f4/102.png)