Dot1X - Cisco Catalyst 2950 Command Reference Manual

Chapter 2 Catalyst 2950 and 2955 Cisco IOS Commands

dot1x

Use the dot1x global configuration command to enable IEEE 802.1x authentication globally. Use the no
form of this command to return to the default setting.
Syntax Description
system-auth-control
guest-vlan supplicant
Defaults IEEE 802.1x authentication is disabled, and the optional guest VLAN behavior is disabled.
Command Modes
Global configuration
Command History Release
12.1(14)EA1
12.1(22)EA2
Usage Guidelines You must enable authentication, authorization, and accounting (AAA) and specify the authentication
method list before enabling IEEE 802.1x authentication globally. A method list describes the sequence
and authentication methods to be queried to authenticate a user.
Before globally enabling IEEE 802.1x authentication on a switch, remove the EtherChannel
configuration from the interfaces on which IEEE 802.1x authentication and EtherChannel are
configured.
If you are using a device running the Cisco Access Control Server (ACS) application for IEEE 802.1x
authentication with EAP-Transparent LAN Services (TLS) and with EAP-MD5 and your switch is
running Cisco IOS Release 12.1(14)EA1, make sure that the device is running ACS Version 3.2.1 or
later.
You can use the guest-vlan supplicant keywords to enable the optional IEEE 802.1x guest VLAN
behavior globally on the switch. For more information, see the
Examples This example shows how to globally enable IEEE 802.1x authentication on a switch:
Switch(config)# dot1x system-auth-control
This example shows how to globally enable the optional guest VLAN behavior on a switch:
Switch(config)# dot1x guest-vlan supplicant
You can verify your settings by entering the show dot1x privileged EXEC command.
OL-10102-01
dot1x {system-auth-control} | {guest-vlan supplicant}
no dot1x {system-auth-control} | {guest-vlan supplicant}
Enable IEEE 802.1x authentication globally on the switch.
Enable optional guest VLAN behavior globally on the switch.
Modification
This command was introduced.
The guest-vlan supplicant keywords were added.
dot1x guest-vlan
Catalyst 2950 and Catalyst 2955 Switch Command Reference
dot1x
command.
2-87