Dot1X - Cisco Catalyst 3750 Command Reference Manual

dot1x

dot1x
Use the dot1x global configuration command on the switch stack or on a standalone switch to globally
enable 802.1x. Use the no form of this command to return to the default setting.
Syntax Description
system-auth-control
guest-vlan supplicant
Defaults 802.1x is disabled, and the optional guest VLAN behavior is disabled.
Command Modes
Global configuration
Command History Release
12.1(14)EA1
12.2(25)SE
Usage Guidelines You must enable authentication, authorization, and accounting (AAA) and specify the authentication
method list before globally enabling 802.1x. A method list describes the sequence and authentication
methods to be queried to authenticate a user.
Before globally enabling 802.1x on a switch, remove the EtherChannel configuration from the interfaces
on which 802.1x and EtherChannel are configured.
If you are using a device running the Cisco Access Control Server (ACS) application for 802.1x
authentication with EAP-Transparent LAN Services (TLS) and with EAP-MD5 and your switch is
running Cisco IOS Release 12.1(14)EA1, make sure that the device is running ACS Version 3.2.1 or
later.
You can use the guest-vlan supplicant keywords to enable the optional 802.1x guest VLAN behavior
globally on the switch. For more information, see the
Examples
This example shows how to globally enable 802.1x on a switch:
Switch(config)# dot1x system-auth-control
This example shows how to globally enable the optional guest VLAN behavior on a switch:
Switch(config)# dot1x guest-vlan supplicant
You can verify your settings by entering the show dot1x [interface interface-id] privileged EXEC
command.
Catalyst 3750 Switch Command Reference
2-78
dot1x {system-auth-control} | {guest-vlan supplicant}
no dot1x {system-auth-control} | {guest-vlan supplicant}
Enable 802.1x globally on the switch.
Enable optional guest VLAN behavior globally on the switch.
Modification
This command was introduced.
The guest-vlan supplicant keywords were added.
Chapter 2 Catalyst 3750 Switch Cisco IOS Commands
dot1x guest-vlan command.
78-16181-03