Cisco Catalyst 4500 Series Software Configuration Manual page 1347

Chapter 49 Configuring 802.1X Port-Based Authentication
Command
Step 3
Switch(config-if)# switchport mode
access
or
Switch(config-if)# switchport mode
private-vlan host
Step 4
Switch(config-if)# dot1x pae
authenticator
Step 5
Switch(config-if)# authentication
port-control auto
Step 6 Cisco IOS Release 12.2(50)SG and later
Switch(config-if)# authentication
control-direction {in | both}
Cisco IOS Release 12.2(46)SG or earlier
releases
Switch(config-if)# dot1x
control-direction {in | both}
Step 7
Switch(config)# end
Step 8
Switch# show dot1x interface
interface-id details
Step 9
Switch# copy running-config
startup-config
Unidirectional controlled port only works when Spanning Tree PortFast is enabled on the port.
Note
Unidirectional controlled port and Spanning Tree PortFast should be configured on a switch port that
connects to a host. If two such ports are connected together with an Ethernet cable, high CPU utilization
may result because host learning will be flapping between the two ports.
This example shows how to enable unidirectional port control:
Cisco IOS Release 12.2(50)SG and later
Switch# configure terminal
Switch(config)# interface gigabitethernet3/3
Switch(config-if)# switchport mode access
Switch(config-if)# dot1x pae authenticator
Switch(config-if)# authentication port-control auto
Switch(config-if)# authentication control-direction in
Switch(config-if)# end
Switch# show dot1x int g3/3
Dot1x Info for GigabitEthernet3/3
-----------------------------------
PAE
PortControl
ControlDirection
HostMode
ReAuthentication
QuietPeriod
ServerTimeout
SuppTimeout
ReAuthPeriod
ReAuthMax
MaxReq
TxPeriod
Purpose
Specifies a nontrunking, nontagged single VLAN Layer 2 interface.
Specifies that the ports with a valid PVLAN trunk association become active
host PVLAN trunk ports.
Enables 802.1X authentication on the port with default parameters.
Refer to the
Enables 802.1X authentication on the interface.
Enables unidirectional port control on each port.
Returns to privileged EXEC mode.
(Optional) Verifies your entries.
(Optional) Saves your entries in the configuration file.
= AUTHENTICATOR
= AUTO
= In
= SINGLE_HOST
= Disabled
= 60
= 30
= 30
= 3600 (Locally configured)
= 2
= 2
= 30
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Configuring 802.1X Port-Based Authentication
"Default 802.1X Configuration" section on page 49-27.
49-67