Cisco IE-4000 Software Configuration Manual page 238

Configuring IEEE 802.1x Port-Based Authentication
Monitoring and Maintaining IEEE 802.1x Port-Based Authentication
Monitoring and Maintaining
Authentication
Command
show dot1x all statistics
show dot1x statistics interface interface-id
show dot1x all [details | statistics | summary]
show dot1x interface interface-id
Configuration Examples for
Port-Based Authentication
Enabling a Readiness Check: Example
This example shows how to enable a readiness check on a switch to query a port. It also shows the response received
from the queried port verifying that the device connected to it is 802.1x-capable:
switch# dot1x test eapol-capable interface GigabitEthernet1/18
DOT1X_PORT_EAPOL_CAPABLE:DOT1X: MAC 00-01-02-4b-f1-a3 on GigabitEthernet1/18 is EAPOL capable
Enabling 802.1x Authentication: Example
This example shows how to enable 802.1x authentication and to allow multiple hosts:
Switch(config)# interface GigabitEthernet1/18
Switch(config-if)# authentication port-control auto
Switch(config-if)# authentication host-mode multi-host
Switch(config-if)# end
Enabling MDA: Example
This example shows how to enable MDA and to allow both a host and a voice device on the port:
Switch(config)# interface GigabitEthernet1/18
Switch(config-if)# authentication port-control auto
Switch(config-if)# authentication host-mode multi-domain
Switch(config-if)# switchport voice vlan 101
Switch(config-if)# end
Disabling the VLAN Upon Switch Violoation: Example
This example shows how to configure the switch to shut down any VLAN on which a security violation error occurs:
Switch(config)# errdisable detect cause security-violation shutdown vlan
This example shows how to reenable all VLANs that were error-disabled:
Switch# clear errdisable interface GigabitEthernet1/18 vlan
IEEE 802.1x Port-Based
Purpose
Displays 802.1x statistics for all ports.
Displays 802.1x statistics for a specific port.
Displays the 802.1x administrative and operational status
for the switch.
Displays the 802.1x administrative and operational status
for a specific port.
Configuring IEEE 802.1x
234