Cisco WS-C4003 Software Guide - Page 394

Configuring Authentication Chapter 27 Configuring Switch Access Using AAA To globally enable 802.1x authentication, perform this task in privileged mode: Task Globally enable 802.1x. Command set dot1x system-auth-control enable This example shows how to globally enable 802.1x authentication: Console> (enable) set dot1x system-auth-control enable dot1x system-auth-control enabled. Disabling 802.1x Globally When 802.1x authentication is enabled for the entire system, you can disable it globally. When 802.1x authentication is disabled globally, it is no longer available at any port, even ports that were previously configured for it. To globally disable 802.1x authentication, perform this task in privileged mode: Task Globally disable 802.1x. Command set dot1x system-auth-control disable This example shows how to globally disable 802.1x authentication: Console> (enable) set dot1x system-auth-control disable dot1x system-auth-control disabled. Enabling and Initializing 802.1x Authentication for Individual Ports After 802.1x authentication is globally enabled, you can enable and initialize 802.1x authentication from only the console for individual ports. To globally enable 802.1x authentication, see the "Enabling 802.1x Globally" section on page 27-39. Note You must specify at least one RADIUS server before you can enable 802.1x authentication on the switch. For information on specifying a RADIUS server, see the "Specifying RADIUS Servers" section on page 27-23. To enable and initialize 802.1x authentication for access to the switch, perform this task in privileged mode: Step 1 Step 2 Step 3 Task Enable 802.1x control on a specific port. Initialize 802.1x on the same port. Verify the 802.1x configuration. Command set port dot1x mod/port port-control auto set port dot1x mod/port initialize show port dot1x mod/port config 27-40 Software Configuration Guide-Catalyst 4000 Family, Catalyst 2948G, Catalyst 2980G, Releases 6.3 and 6.4 78-12647-02