Cisco Catalyst 4500 Series Configuration Manual page 1005

Chapter 44 Configuring 802.1X Port-Based Authentication
Switch(config-if)# dot1x port-control auto
Switch(config-if)# dot1x host-mode multi-domain
Switch(config-if)# dot1x mac-auth-bypass
Switch(config-if)# no shut
Switch(config-if)# end
This example shows how to verify the dot1x MDA settings on interface FastEthernet3/1:
Switch# show dot1x interface FastEthernet3/1 detail
Dot1x Info for FastEthernet3/1
-----------------------------------
PAE
PortControl
ControlDirection
HostMode
ReAuthentication
QuietPeriod
ServerTimeout
SuppTimeout
ReAuthPeriod
ReAuthMax
MaxReq
TxPeriod
RateLimitPeriod
Dot1x Authenticator Client List
-------------------------------
Domain
Supplicant
Port Status
Authentication Method
Authorized By
Vlan Policy
Domain
Supplicant
Port Status
Authentication Method
Authorized By
Switch#
This example shows how to enable MDA and to authentication of multiple hosts and a voice device on
an IEEE 802.1x-authorized port:
Note
Switch# conf t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)# interface FastEthernet3/1
Switch(config-if)# shut
Switch(config-if)# switchport access vlan 12
Switch(config-if)# switchport mode access
Switch(config-if)# switchport voice vlan 10
Switch(config-if)# dot1x pae authenticator
OL-25340-01
= AUTHENTICATOR
= AUTO
= Both
= MULTI_DOMAIN
= Disabled
= 60
= 30
= 30
= 3600 (Locally configured)
= 2
= 2
= 30
= 0
= DATA
= 0000.0000.ab01
Auth SM State = AUTHENTICATED
Auth BEND SM Stat = IDLE
= AUTHORIZED
= Dot1x
= Authentication Server
= 12
= VOICE
= 0060.b057.4687
Auth SM State = AUTHENTICATED
Auth BEND SM Stat = IDLE
= AUTHORIZED
= Dot1x
= Authentication Server
This example applies to Cisco IOS Release 12.2(50)SG and later releases.
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
Configuring 802.1X Port-Based Authentication
44-37