Configuring Voice Aware 802.1X Security - Cisco Catalyst 2960-XR Security Configuration Manual

Configuring Voice Aware 802.1x Security

DETAILED STEPS
Command or Action
Step 1
dot1x test eapol-capable [interface interface-id]
Example:
Switch# dot1x test eapol-capable interface
gigabitethernet1/0/13
Step 2 configure terminal
Example:
Switch# configure terminal
Step 3 dot1x test timeout timeout
Example:
Switch(config)# dot1x test timeout 300
Step 4 end
Example:
Switch(config)# end
Related Topics
802.1x Readiness Check, on page 226
Configuring Voice Aware 802.1x Security
Follow these guidelines to configure voice aware 802.1x voice security on the switch:
• You enable voice aware 802.1x security by entering the errdisable detect cause security-violation
• If you use the errdisable recovery cause security-violation global configuration command to configure
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
248
shutdown vlan global configuration command. You disable voice aware 802.1x security by entering
the no version of this command. This command applies to all 802.1x-configured ports in the switch.
If you do not include the shutdown vlan keywords, the entire port is shut down when
Note
it enters the error-disabled state.
error-disabled recovery, the port is automatically re-enabled. If error-disabled recovery is not configured
for the port, you re-enable it by using the shutdown and no shutdown interface configuration commands.
Configuring IEEE 802.1x Port-Based Authentication
Purpose
Enables the 802.1x readiness check on the switch.
(Optional) For interface-id specify the port on which to check
for IEEE 802.1x readiness.
If you omit the optional interface keyword, all interfaces
Note
on the switch are tested.
(Optional) Enters global configuration mode.
(Optional) Configures the timeout used to wait for EAPOL
response. The range is from 1 to 65535 seconds. The default is
10 seconds.
Returns to privileged EXEC mode.
OL-29434-01