Authentication Order - Cisco catalyst 3750 Command Reference Manual

Chapter 2 Catalyst 3750 Switch Cisco IOS Commands

authentication order

Use the authentication order interface configuration command to set the order of authentication
methods used on a port.
Syntax Description
dot1x
mab
webauth
Command Default The default authentication order is dot1x followed by mab and webauth.
Command Modes
Interface configuration
Command History Release
12.2(50)SE
Usage Guidelines Ordering sets the order of methods that the switch attempts when trying to authenticate a new device
connected to a port. If one method in the list is unsuccessful, the next method is attempted.
Each method can only be entered once. Flexible ordering is only possible between 802.1x and MAB.
Web authentication can be configured as either a standalone method or as the last method in the order
after either 802.1x or MAB. Web authentication should be configured only as fallback to dot1x or mab.
Examples This example shows how to add 802.1x as the first authentication method, MAB as the second method,
and web authentication as the third method:
Switch(config)# authentication order dotx mab webauth
This example shows how to add MAC authentication Bypass (MAB) as the first authentication method
and web authentication as the second authentication method:
Switch(config)# authentication order mab webauth
You can verify your settings by entering the show authentication privileged EXEC command.
OL-8552-07
authentication order [dot1x | mab] {webauth}
no authentication order
Add 802.1x to the order of authentication methods.
Add MAC authentication bypass (MAB) to the order of authentication
methods.
Add web authentication to the order of authentication methods.
Modification
This command was introduced.
Catalyst 3750 Switch Command Reference
authentication order
2-33