Configuring 802.1X User Distribution - Cisco Catalyst 3750-X Software Configuration Manual

Chapter 11 Configuring IEEE 802.1x Port-Based Authentication
Command
Step 3
authentication port-control auto
or
dot1x port-control auto
dot1x mac-auth-bypass [eap]
Step 4
Step 5 end
Step 6
show authentication interface-id
or
show dot1x interface interface-id
Step 7
copy running-config startup-config
To disable MAC authentication bypass, use the no dot1x mac-auth-bypass interface configuration
command.
This example shows how to enable MAC authentication bypass:
Switch(config-if)# dot1x mac-auth-bypass

Configuring 802.1x User Distribution

Beginning in global configuration, follow these steps to configure a VLAN group and to map a VLAN
to it:
Command
Step 1 vlan group vlan-group-name vlan-list vlan-list
Step 2 show vlan group all vlan-group-name
Step 3
no vlan group vlan-group-name vlan-list vlan-list
This example shows how to configure the VLAN groups, to map the VLANs to the groups, to and verify
the VLAN group configurations and mapping to the specified VLANs:
switch(config)# vlan group eng-dept vlan-list 10
switch(config)# show vlan group group-name eng-dept
Group Name
-------------
eng-dept
switch# show dot1x vlan-group all
Group Name
-------------
eng-dept
hr-dept
This example shows how to add a VLAN to an existing VLAN group and to verify that the VLAN was
added:
OL-21521-01
Purpose
Enable 802.1x authentication on the port.
Enable MAC authentication bypass.
(Optional) Use the eap keyword to configure the switch to use EAP for
authorization.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Purpose
Configure a VLAN group, and map a single VLAN or a
range of VLANs to it.
Verify the configuration.
Clear the VLAN group configuration or elements of the
VLAN group configuration.
Vlans Mapped
--------------
10
Vlans Mapped
--------------
10
20
Catalyst 3750-X and 3560-X Switch Software Configuration Guide
Configuring 802.1x Authentication
11-57