Configuring 802.1X With Unidirectional Controlled Port - Cisco Catalyst 4500 Series Configuration Manual

Configuring 802.1X Port-Based Authentication
SuppTimeout
ReAuthPeriod
ReAuthMax
MaxReq
TxPeriod
RateLimitPeriod
Critical-Auth
Critical Recovery Action
Critical-Auth VLAN
Dot1x Authenticator Client List
-------------------------------
Supplicant
Auth SM State
Auth BEND SM Stat = RESPONSE
Port Status
Authentication Method
Authorized By
Operational HostMode
Vlan Policy
Switch#

Configuring 802.1X with Unidirectional Controlled Port

To configure unidirectional controlled port, perform this task:
Command
Step 1
Switch# configure terminal
Step 2
Switch(config)# interface
interface-id
Step 3
Switch(config-if)# switchport mode
access
or
Switch(config-if)# switchport mode
private-vlan host
Step 4
Switch(config-if)# dot1x pae
authenticator
Step 5
Switch(config-if)# authentication
port-control auto
Step 6 Cisco IOS Release 12.2(50)SG and later
Switch(config-if)# authentication
control-direction {in | both}
Cisco IOS Release 12.2(46)SG or earlier
releases
Switch(config-if)# dot1x
control-direction {in | both}
Step 7
Switch(config)# end
Step 8
Switch# show dot1x interface
interface-id details
Step 9
Switch# copy running-config
startup-config
Software Configuration Guide—Release IOS XE 3.3.0SG and IOS 15.1(1)SG
44-64
= 30
= 3600 (Locally configured)
= 2
= 2
= 30
= 0
= Enabled
= Reinitialize
= 17
= 0000.0000.0001
= AUTHENTICATING
= AUTHORIZED
= Dot1x
= Critical-Auth
= SINGLE_HOST
= 17
Purpose
Enters global configuration mode.
Specifies the port to be configured and enters interface configuration
mode.
Specifies a nontrunking, nontagged single VLAN Layer 2 interface.
Specifies that the ports with a valid PVLAN trunk association become active
host PVLAN trunk ports.
Enables 802.1X authentication on the port with default parameters.
Refer to the "Default 802.1X Configuration" section on page
Enables 802.1X authentication on the interface.
Enables unidirectional port control on each port.
Returns to privileged EXEC mode.
(Optional) Verifies your entries.
(Optional) Saves your entries in the configuration file.
Chapter 44 Configuring 802.1X Port-Based Authentication
44-27.
OL-25340-01