Cisco Catalyst 2960-X Security Configuration Manual page 351

Configuring IEEE 802.1x Port-Based Authentication
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
Switch# configure terminal
Step 2 interface interface-id
Example:
Switch(config)# interface gigabitethernet2/0/3
Step 3 Use one of the following:
• switchport mode access
• switchport mode private-vlan host
Example:
or
Switch(config-if)# switchport mode access
Step 4
authentication port-control auto
Example:
Switch(config-if)# authentication port-control
auto
Step 5 authentication event fail action authorize vlan vlan-id
Example:
Switch(config-if)# authentication event fail
action authorize vlan 8
Step 6 authentication event retry retry count
Example:
Switch(config-if)# authentication event retry
2
OL-29048-01
Purpose
Enters the global configuration mode.
Specifies the port to be configured, and enter interface
configuration mode.
• Sets the port to access mode.
• Configures the Layer 2 port as a private-VLAN host
port.
Enables 802.1x authentication on the port.
Specifies an active VLAN as an 802.1x restricted VLAN.
The range is 1 to 4094.
You can configure any active VLAN except an internal
VLAN (routed port), an RSPAN VLAN or a voice VLAN
as an 802.1x restricted VLAN.
Specifies a number of authentication attempts to allow
before a port moves to the restricted VLAN. The range is
1 to 3, and the default is 3.
Catalyst 2960-X Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX
Configuring a Restricted VLAN
327